feat: update entrypoint script to ensure user switching occurs only for root

Author: aspirantzhang

php/8.4/entrypoint.sh

@@ -1,28 +1,34 @@
 #!/bin/sh
 set -e
 
-if [ -n "$HOST_UID" ] && [ -n "$HOST_GID" ]; then
-    WWW_DATA_CURRENT_UID=$(id -u www-data)
-    WWW_DATA_CURRENT_GID=$(id -g www-data)
- 
-    if [ "$WWW_DATA_CURRENT_UID" != "$HOST_UID" ] || [ "$WWW_DATA_CURRENT_GID" != "$HOST_GID" ]; then
-        groupmod -o -g "$HOST_GID" www-data
-        usermod -o -u "$HOST_UID" www-data
+if [ "$(id -u)" = "0" ]; then
+    if [ -n "$HOST_UID" ] && [ -n "$HOST_GID" ]; then
+        WWW_DATA_CURRENT_UID=$(id -u www-data)
+        WWW_DATA_CURRENT_GID=$(id -g www-data)
+    
+        if [ "$WWW_DATA_CURRENT_UID" != "$HOST_UID" ] || [ "$WWW_DATA_CURRENT_GID" != "$HOST_GID" ]; then
+            groupmod -o -g "$HOST_GID" www-data
+            usermod -o -u "$HOST_UID" www-data
+        fi
     fi
-fi
 
-if [ -f /etc/nginx/custom.conf ]; then
-    cp /etc/nginx/custom.conf /etc/nginx/conf.d/default.conf
-else
-    envsubst '$NGINX_ROOT' < /etc/nginx/conf.d/default.conf.template > /etc/nginx/conf.d/default.conf
-fi
+    if [ -f /etc/nginx/custom.conf ]; then
+        cp /etc/nginx/custom.conf /etc/nginx/conf.d/default.conf
+    else
+        envsubst '$NGINX_ROOT' < /etc/nginx/conf.d/default.conf.template > /etc/nginx/conf.d/default.conf
+    fi
 
-if [ "${VITE_ENABLED}" = "true" ]; then
-    envsubst '$PROJECT_ROOT' < /etc/supervisor/conf.d/vite.conf.template >> /etc/supervisor/conf.d/supervisord.conf
-fi
+    if [ "${VITE_ENABLED}" = "true" ]; then
+        envsubst '$PROJECT_ROOT' < /etc/supervisor/conf.d/vite.conf.template >> /etc/supervisor/conf.d/supervisord.conf
+    fi
+
+    chown -R www-data:www-data /var/log/supervisor
+    chown -R www-data:www-data /var/log/nginx
+    chown -R www-data:www-data /var/lib/nginx
+    chown -R www-data:www-data /var/run
+    chown -R www-data:www-data /home/wwwroot
 
-if [ -n "$HOST_UID" ] && [ -n "$HOST_GID" ]; then
-    exec gosu www-data "$@"
-else
-    exec "$@"
+    exec gosu www-data "$0" "$@"
 fi
+
+exec "$@"