Skip to content

Commit 701b726

Browse files
committed
feat: tighten gosu env var handling
1 parent 135f791 commit 701b726

1 file changed

Lines changed: 14 additions & 14 deletions

File tree

scripts/base/ampstart.sh

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ touch /home/amp/.gitconfig
4242
chown -R amp:amp /home/amp
4343

4444
# Make AMP binary executable
45-
export AMP_BIN="/AMP/AMP_Linux_${ARCH}"
45+
AMP_BIN="/AMP/AMP_Linux_${ARCH}"
4646
[ -f "${AMP_BIN}" ] && chmod +x "${AMP_BIN}"
4747

4848
# Install extra dependencies if needed
@@ -79,19 +79,19 @@ fi
7979

8080
# Handoff
8181
echo "[Info] Starting AMP..."
82-
exec gosu amp:amp env -i \
83-
HOME=/home/amp \
84-
USER=amp LOGNAME=amp SHELL=/bin/bash \
85-
LANG="${LANG:-en_US.UTF-8}" LANGUAGE="${LANGUAGE:-en_US:en}" LC_ALL="${LC_ALL:-en_US.UTF-8}" \
86-
PATH=/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games \
87-
AMPHOSTPLATFORM="${AMPHOSTPLATFORM:-}" \
88-
AMP_CONTAINER="${AMP_CONTAINER:-}" \
89-
AMPMEMORYLIMIT="${AMPMEMORYLIMIT:-}" \
90-
AMPSWAPLIMIT="${AMPSWAPLIMIT:-}" \
91-
AMPCONTAINERCPUS="${AMPCONTAINERCPUS:-}" \
92-
AMP_CONTAINER_HOST_NETWORK="${AMP_CONTAINER_HOST_NETWORK:-}" \
93-
AMP_BIN="$AMP_BIN" \
94-
bash -lc '
82+
keep_env=(
83+
HOME=/home/amp
84+
USER=amp LOGNAME=amp SHELL=/bin/bash
85+
LANG="${LANG:-en_US.UTF-8}" LANGUAGE="${LANGUAGE:-en_US:en}" LC_ALL="${LC_ALL:-en_US.UTF-8}"
86+
PATH=/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games
87+
MAIL=/var/mail/amp
88+
AMP_BIN="$AMP_BIN"
89+
)
90+
for v in AMPHOSTPLATFORM AMP_CONTAINER AMP_CONTAINER_HOST_NETWORK AMPMEMORYLIMIT AMPSWAPLIMIT AMPCONTAINERCPUS; do
91+
if [[ -n "${!v-}" ]]; then keep_env+=("$v=${!v}"); fi
92+
done
93+
94+
exec gosu amp:amp env -i "${keep_env[@]}" bash -lc '
9595
cd /AMP
9696
exec "$AMP_BIN" "$@"
9797
' -- _ "$@"

0 commit comments

Comments
 (0)