Don't try to chown SSLDIR if it's read-only or we don't have permission

Fixes #48
voxpupuli · Feb 6, 2024 · 9fd4a3b · 9fd4a3b
1 parent 906a17b
commit 9fd4a3b
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/puppetdb/docker-entrypoint.d/20-configure-ssl.sh b/puppetdb/docker-entrypoint.d/20-configure-ssl.sh
@@ -11,6 +11,8 @@ if [ "$USE_PUPPETSERVER" = true ]; then
   sed -i '/^# ssl-/s/^# //g' /etc/puppetlabs/puppetdb/conf.d/jetty.ini
 fi
 
-# make sure Java apps running as puppetdb can read these files
-echo "Setting ownership for $SSLDIR to puppetdb:puppetdb"
-chown -R puppetdb:puppetdb ${SSLDIR}
+if [ -w "$SSLDIR" ] && [ "$(id -un)" = "root" ]; then
+  # make sure Java apps running as puppetdb can read these files
+  echo "Setting ownership for $SSLDIR to puppetdb:puppetdb"
+  chown -R puppetdb:puppetdb ${SSLDIR}
+fi