Fix file permissions

Author: lucasssvaz

tools/docker/Dockerfile

@@ -1,5 +1,8 @@
 FROM ubuntu:22.04
 
+# switch to root, let the entrypoint drop back to host user
+USER root
+
 ARG DEBIAN_FRONTEND=noninteractive
 
 RUN : \
@@ -34,6 +37,13 @@ RUN : \
   && rm -rf /var/lib/apt/lists/* \
   && :
 
+# install gosu for a better su+exec command
+ARG GOSU_VERSION=1.17
+RUN dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')" \
+ && wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch" \
+ && chmod +x /usr/local/bin/gosu \
+ && gosu nobody true
+
 # To build the image for a branch or a tag of the lib-builder, pass --build-arg LIBBUILDER_CLONE_BRANCH_OR_TAG=name.
 # To build the image with a specific commit ID of lib-builder, pass --build-arg LIBBUILDER_CHECKOUT_REF=commit-id.
 # It is possibe to combine both, e.g.:
@@ -51,6 +61,7 @@ ARG LIBBUILDER_CLONE_SHALLOW_DEPTH=1
 ARG LIBBUILDER_TARGETS=all
 
 ENV LIBBUILDER_PATH=/opt/esp/lib-builder
+ENV ARDUINO_PATH=/opt/esp/lib-builder/arduino-esp32
 
 RUN echo LIBBUILDER_CHECKOUT_REF=$LIBBUILDER_CHECKOUT_REF LIBBUILDER_CLONE_BRANCH_OR_TAG=$LIBBUILDER_CLONE_BRANCH_OR_TAG && \
     git clone --recursive \
@@ -67,10 +78,10 @@ RUN echo LIBBUILDER_CHECKOUT_REF=$LIBBUILDER_CHECKOUT_REF LIBBUILDER_CLONE_BRANC
       git submodule update --init --recursive; \
     fi
 
-RUN cp $LIBBUILDER_PATH/tools/docker/entrypoint.sh $LIBBUILDER_PATH/entrypoint.sh
+COPY entrypoint.sh $LIBBUILDER_PATH/entrypoint.sh
 
 # Ccache is installed, enable it by default
 ENV IDF_CCACHE_ENABLE=1
 
-WORKDIR $LIBBUILDER_PATH
-ENTRYPOINT [ "$LIBBUILDER_PATH/entrypoint.sh" ]
+WORKDIR /opt/esp/lib-builder
+ENTRYPOINT [ "/opt/esp/lib-builder/entrypoint.sh" ]

tools/docker/entrypoint.sh

@@ -15,4 +15,15 @@ then
 	done
 fi
 
-exec "$@"
+if [ "$(id -u)" = "0" ]; then
+	groupadd -g ${HOST_UID} host_user
+	useradd -m -u ${HOST_UID} -g ${HOST_UID} host_user
+	chown -R ${HOST_UID}:${HOST_UID} /arduino-esp32
+	chown -R ${HOST_UID}:${HOST_UID} /opt/esp
+
+	# Add call to gosu to drop from root user to host_user
+	# when running original entrypoint
+	set -- gosu host_user "$@" -c /arduino-esp32
+fi
+
+exec "$@" -c /arduino-esp32