Fix gosu

- Modern versions of gosu will continue to run as expected Signed-off-by: Andy Neff <[email protected]>
VisionSystemsInc · Dec 11, 2023 · f01bdcf · f01bdcf
1 parent e4ee085
commit f01bdcf
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/linux/just_files/just_entrypoint.sh b/linux/just_files/just_entrypoint.sh
@@ -194,6 +194,9 @@ if [ "${ALREADY_RUN_ONCE+set}" != "set" ]; then
     JUST_DOCKER_ENTRYPOINT_CHMOD_DIRS="${JUST_DOCKER_ENTRYPOINT_CHMOD_DIRS-${JUST_DOCKER_ENTRYPOINT_INTERNAL_VOLUMES-}}" \
     /usr/bin/env bash "${VSI_COMMON_DIR}/linux/just_files/just_entrypoint_functions"
   )
+  # Workaround for gosu pretending blocking a CVE we don't care about
+  export GOSU_PLEASE_LET_ME_BE_COMPLETELY_INSECURE_I_GET_TO_KEEP_ALL_THE_PIECES="I've seen things you people wouldn't believe. Attack ships on fire off the shoulder of Orion. I watched C-beams glitter in the dark near the Tannhäuser Gate. All those moments will be lost in time, like tears in rain. Time to die."
+
   # Rerun entrypoint as user now, (skipping the root part via ALREADY_RUN_ONCE)
   ALREADY_RUN_ONCE=1 exec gosu ${DOCKER_USERNAME} /usr/bin/env bash "${file}" ${@+"${@}"}
 fi