Proxmox/ProxmoxVE
1
0
Fork 1
mirror of https://github.com/community-scripts/ProxmoxVE.git synced 2026-09-21 11:55:53 +02:00
Code Issues Packages Projects Releases Wiki Activity

authentik: scope blueprints chown to avoid recursing into the mp0 bind mount (#17008)

Browse Source
This commit is contained in:
CanbiZ (MickLesk)
2026-09-05 22:41:58 +02:00
committed by GitHub
parent 7878f3095f
commit d4771cbf98
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ct/authentik.sh
+6 -6
View File
@@ -88,7 +88,7 @@ function update_script() {
msg_info "Moving blueprints to presistent directory" msg_info "Moving blueprints to presistent directory"
cp -r /opt/authentik/blueprints /opt/authentik-data/ cp -r /opt/authentik/blueprints /opt/authentik-data/
rm -r /opt/authentik/blueprints rm -r /opt/authentik/blueprints
chown -Rf authentik:authentik /opt/authentik-data $STD find /opt/authentik-data -path '*/lost+found' -prune -o -exec chown authentik:authentik {} +
yq -i ".blueprints_dir = \"/opt/authentik-data/blueprints\"" /etc/authentik/config.yml yq -i ".blueprints_dir = \"/opt/authentik-data/blueprints\"" /etc/authentik/config.yml
msg_ok "blueprints moved to presistent directory" msg_ok "blueprints moved to presistent directory"
msg_warn "The blueprints provided by authentik are always overwritten when updated! Only manually created custom blueprints remain unchanged between updates." msg_warn "The blueprints provided by authentik are always overwritten when updated! Only manually created custom blueprints remain unchanged between updates."
@@ -155,8 +155,8 @@ function update_script() {
cp -r /opt/authentik/blueprints /opt/authentik-data/ cp -r /opt/authentik/blueprints /opt/authentik-data/
rm -r /opt/authentik/blueprints rm -r /opt/authentik/blueprints
chown -Rf authentik:authentik /opt/authentik-data $STD find /opt/authentik-data -path '*/lost+found' -prune -o -exec chown authentik:authentik {} +
if [[ $MAJOR == 2026 && $MINOR -lt 8 ]]; then if [[ $MAJOR == 2026 && $MINOR -lt 8 ]]; then
msg_info "Updating Worker and Server config (from $MAJOR.$MINOR)" msg_info "Updating Worker and Server config (from $MAJOR.$MINOR)"
cat <<EOF >>/etc/default/authentik-server cat <<EOF >>/etc/default/authentik-server
@@ -178,8 +178,8 @@ EOF
fi fi
msg_info "Updating Worker and Server config" msg_info "Updating Worker and Server config"
sed -i "s|/dev/shm$|/dev/shm/authentik-server|g" /etc/default/authentik-server sed -i "s|/dev/shm\/\?$|/dev/shm/authentik-server|g" /etc/default/authentik-server
sed -i "s|/dev/shm$|/dev/shm/authentik-worker|g" /etc/default/authentik-worker sed -i "s|/dev/shm\/\?$|/dev/shm/authentik-worker|g" /etc/default/authentik-worker
msg_ok "Updated Worker and Server config" msg_ok "Updated Worker and Server config"
msg_info "Updating services" msg_info "Updating services"
@@ -228,7 +228,7 @@ $STD pct exec "$CTID" -- bash -c "mkdir -p /opt/authentik-data/{certs,media,geoi
cp /opt/authentik/tests/GeoLite2-City-Test.mmdb /opt/authentik-data/geoip/GeoLite2-City.mmdb; \ cp /opt/authentik/tests/GeoLite2-City-Test.mmdb /opt/authentik-data/geoip/GeoLite2-City.mmdb; \
cp -r /opt/authentik/blueprints /opt/authentik-data/; \ cp -r /opt/authentik/blueprints /opt/authentik-data/; \
rm -r /opt/authentik/blueprints; \ rm -r /opt/authentik/blueprints; \
chown -Rf authentik:authentik /opt/authentik-data" find /opt/authentik-data -path '*/lost+found' -prune -o -exec chown authentik:authentik {} +"
msg_ok "Attached data storage volume" msg_ok "Attached data storage volume"
msg_info "Starting Services" msg_info "Starting Services"