From d894eb31f2ecc50cd083c547f9315ddb1e8d9640 Mon Sep 17 00:00:00 2001
From: wushuo <wushuo894@outlook.com>
Date: Thu, 15 May 2025 20:58:47 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B5=8B=E8=AF=95=E6=8C=87=E5=AE=9A=E6=9D=83?=
 =?UTF-8?q?=E9=99=90=E6=89=A7=E8=A1=8C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docker/Dockerfile | 28 +++++++++++++++++++++++-----
 docker/exec.sh    |  7 +++++++
 2 files changed, 30 insertions(+), 5 deletions(-)
 create mode 100644 docker/exec.sh

diff --git a/docker/Dockerfile b/docker/Dockerfile
index 0cefac8e..4470332c 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -1,11 +1,29 @@
 FROM ibm-semeru-runtimes:open-17-jre
+
+# Install latest su-exec
+RUN  set -ex; \
+     \
+     curl -o /usr/local/bin/su-exec.c https://raw.githubusercontent.com/ncopa/su-exec/master/su-exec.c; \
+     \
+     fetch_deps='gcc libc-dev'; \
+     apt-get update; \
+     apt-get install -y --no-install-recommends $fetch_deps; \
+     rm -rf /var/lib/apt/lists/*; \
+     gcc -Wall \
+         /usr/local/bin/su-exec.c -o/usr/local/bin/su-exec; \
+     chown root:root /usr/local/bin/su-exec; \
+     chmod 0755 /usr/local/bin/su-exec; \
+     rm /usr/local/bin/su-exec.c; \
+     \
+     apt-get purge -y --auto-remove $fetch_deps
+
 COPY docker/run.sh /run.sh
+COPY docker/exec.sh /exec.sh
 COPY target/ani-rss-jar-with-dependencies.jar /usr/app/ani-rss-jar-with-dependencies.jar
 WORKDIR /usr/app
 VOLUME /config
-ENV PORT="7789"
-ENV CONFIG="/config"
-ENV TZ="Asia/Shanghai"
+ENV PUID=0 PGID=0 UMASK=022
+ENV PORT=7789 CONFIG=/config TZ=Asia/Shanghai
 EXPOSE $PORT
-RUN chmod +x /run.sh
-CMD ["/run.sh"]
+RUN chmod +x /exec.sh /run.sh
+CMD ["/exec.sh"]
diff --git a/docker/exec.sh b/docker/exec.sh
new file mode 100644
index 00000000..ee51237b
--- /dev/null
+++ b/docker/exec.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+
+chown -R ${PUID}:${PGID} /usr/app
+
+umask ${UMASK}
+
+exec su-exec ${PUID}:${PGID} /run.sh
\ No newline at end of file