move mounted code to fix /tmp file permissions (#6354)

Author: pdabelf5

build/Dockerfile

@@ -538,7 +538,7 @@ ARG NAP_MODULES=none
 
 ENV BUILD_OS=${BUILD_OS}
 
-RUN --mount=type=bind,target=/tmp \
+RUN --mount=type=bind,target=/code \
 	--mount=type=bind,from=nginx-files,src=common.sh,target=/usr/local/bin/common.sh \
 	--mount=type=bind,from=nginx-files,src=patch-os.sh,target=/usr/local/bin/patch-os.sh \
 	patch-os.sh \

build/scripts/common.sh

@@ -5,20 +5,20 @@ set -e
 PLUS=""
 if [ -z "${BUILD_OS##*plus*}" ]; then
     mkdir -p /etc/nginx/oidc/
-    cp -a /tmp/internal/configs/oidc/* /etc/nginx/oidc/
+    cp -a /code/internal/configs/oidc/* /etc/nginx/oidc/
     mkdir -p /etc/nginx/state_files/
     PLUS=-plus
 fi
 
-mkdir -p /etc/nginx/njs/ && cp -a /tmp/internal/configs/njs/* /etc/nginx/njs/
+mkdir -p /etc/nginx/njs/ && cp -a /code/internal/configs/njs/* /etc/nginx/njs/
 mkdir -p /var/lib/nginx /etc/nginx/secrets /etc/nginx/stream-conf.d
 setcap 'cap_net_bind_service=+eip' /usr/sbin/nginx 'cap_net_bind_service=+eip' /usr/sbin/nginx-debug
 setcap -v 'cap_net_bind_service=+eip' /usr/sbin/nginx 'cap_net_bind_service=+eip' /usr/sbin/nginx-debug
 
-cp -a /tmp/internal/configs/version1/nginx$PLUS.ingress.tmpl \
-    /tmp/internal/configs/version1/nginx$PLUS.tmpl \
-	/tmp/internal/configs/version2/nginx$PLUS.virtualserver.tmpl \
-    /tmp/internal/configs/version2/nginx$PLUS.transportserver.tmpl \
+cp -a /code/internal/configs/version1/nginx$PLUS.ingress.tmpl \
+    /code/internal/configs/version1/nginx$PLUS.tmpl \
+	/code/internal/configs/version2/nginx$PLUS.virtualserver.tmpl \
+    /code/internal/configs/version2/nginx$PLUS.transportserver.tmpl \
     /
 
 chown -R 101:0 /etc/nginx /var/cache/nginx /var/lib/nginx /var/log/nginx /*.tmpl