fix data dir permissions.

Author: muratgozel

Diff for: Dockerfile

@@ -24,7 +24,7 @@ RUN apk add --no-cache --virtual .build-deps gcc g++ make wget pkgconf dpkg-dev
     bzip2-dev zlib-dev libuuid linux-headers \
     tzdata yaml-dev util-linux-dev && \
     apk add --no-cache git bash python3 py3-pip icu libxml2 lz4-dev zstd-dev \
-    postgresql-dev shadow && \
+    postgresql-dev shadow su-exec && \
     # configure dependencies
     ln -sf python3 /usr/bin/python && \
     mkdir -p /downloads && \
@@ -53,17 +53,15 @@ RUN apk add --no-cache --virtual .build-deps gcc g++ make wget pkgconf dpkg-dev
     apk del --no-network .build-deps
 
 # configure file and folder permissions
-RUN chmod 755 /usr/bin/pgbackrest && \
-    mkdir -p /var/log/pgbackrest && chown -R $PGUSER:$PGUSER /var/log/pgbackrest && chmod 750 /var/log/pgbackrest && \
-    mkdir -p /var/lib/pgbackrest && chown -R $PGUSER:$PGUSER /var/lib/pgbackrest && chmod 750 /var/lib/pgbackrest && \
-    mkdir -p /var/spool/pgbackrest && chown -R $PGUSER:$PGUSER /var/spool/pgbackrest && chmod 750 /var/spool/pgbackrest && \
-    mkdir -p /var/run/postgresql && chown -R $PGUSER:$PGUSER /var/run/postgresql && chmod 775 /var/run/postgresql && \
-    mkdir -p $PGDATA && chown -R $PGUSER:$PGUSER $PGDATA && chmod 750 $PGDATA
+RUN chmod -R 755 /usr/bin/pgbackrest && \
+    mkdir -p /var/log/pgbackrest && chown -R $PGUSER:$PGUSER /var/log/pgbackrest && chmod -R 750 /var/log/pgbackrest && \
+    mkdir -p /var/lib/pgbackrest && chown -R $PGUSER:$PGUSER /var/lib/pgbackrest && chmod -R 750 /var/lib/pgbackrest && \
+    mkdir -p /var/spool/pgbackrest && chown -R $PGUSER:$PGUSER /var/spool/pgbackrest && chmod -R 750 /var/spool/pgbackrest && \
+    mkdir -p /var/run/postgresql && chown -R $PGUSER:$PGUSER /var/run/postgresql && chmod -R 775 /var/run/postgresql && \
+    mkdir -p $PGDATA && chown -R $PGUSER:$PGUSER $PGDATA && chmod -R 750 $PGDATA
 
 STOPSIGNAL SIGINT
 
-USER $PGUSER
-
 # start database service
 ENV PATH=/usr/local/pgsql/bin:$PATH
 ENTRYPOINT ["/entrypoint.sh"]

Diff for: entrypoint.sh

@@ -3,9 +3,12 @@
 pgconf="$PGDATA/postgresql.conf"
 hbaconf="$PGDATA/pg_hba.conf"
 
+mkdir -p /var/run/postgresql && chown -R $PGUSER:$PGUSER /var/run/postgresql && chmod -R 775 /var/run/postgresql
+mkdir -p $PGDATA && chown -R $PGUSER:$PGUSER $PGDATA && chmod -R 750 $PGDATA
+
 # create db cluster if it's not exist
 if [[ ! -f $PGDATA/PG_VERSION ]]; then
-  initdb --encoding=UTF8 --locale=C -D $PGDATA
+  su-exec $PGUSER initdb --encoding=UTF8 --locale=C -D $PGDATA
 
   echo "listen_addresses = '*'" >> $pgconf
   echo "port = $PGPORT" >> $pgconf
@@ -18,7 +21,7 @@ fi
 
 # init pgbackrest
 if ! grep -q "pgbackrest" "$pgconf"; then
-  pg_ctl start -o "-p $PGPORT -k /var/run/postgresql" -D $PGDATA
+  su-exec $PGUSER pg_ctl start -o "-p $PGPORT -k /var/run/postgresql" -D $PGDATA
 
   echo "wal_level = replica" >> $pgconf
   echo "max_wal_size = 1GB" >> $pgconf
@@ -29,19 +32,19 @@ if ! grep -q "pgbackrest" "$pgconf"; then
   echo "log_line_prefix = ''" >> $pgconf
   echo "log_timezone = 'Etc/UTC'" >> $pgconf
 
-  pgbackrest --stanza=app --pg1-port=$PGPORT --log-level-console=info stanza-create
-  pg_ctl restart -o "-p $PGPORT -k /var/run/postgresql" -D $PGDATA
+  su-exec $PGUSER pgbackrest --stanza=app --pg1-port=$PGPORT --log-level-console=info stanza-create
+  su-exec $PGUSER pg_ctl restart -o "-p $PGPORT -k /var/run/postgresql" -D $PGDATA
 
-  pgbackrest --stanza=app --pg1-port=$PGPORT --log-level-console=info check
+  su-exec $PGUSER pgbackrest --stanza=app --pg1-port=$PGPORT --log-level-console=info check
   pgbackrest_check_result=$?
 
   if [ $pgbackrest_check_result -ne 0 ]; then
     echo "pgbackrest check failed."
     exit $pgbackrest_check_result
   fi
 
-  pg_ctl stop -o "-p $PGPORT -k /var/run/postgresql" -D $PGDATA
+  su-exec $PGUSER pg_ctl stop -o "-p $PGPORT -k /var/run/postgresql" -D $PGDATA
 fi
 
 # start postgresql server
-"$@"
+su-exec $PGUSER "$@"