3a55edd917
The root-drop guard only checked `id -u = 0`, so when the target user was also root (MEMOS_UID=0, common under rootless Docker with userns-remap) su-exec re-execed back into root, re-entered the block, and looped forever without ever reaching the memos binary — the container hung with no logs. Add a MEMOS_ENTRYPOINT_SWITCHED marker (preserved across the su-exec re-exec) so the privilege drop runs at most once, and log the resolved UID:GID on startup so this path is never silent again. Closes #6061 |
||
|---|---|---|
| .. | ||
| build.sh | ||
| compose.yaml | ||
| Dockerfile | ||
| entrypoint.sh | ||
| entrypoint_test.sh | ||
| install.sh | ||