#!/bin/sh

# Remap the betterdesk user/group to PUID/PGID at container start (#376).

# Sourced from entrypoints while running as root (before chown / su-exec).

# Defaults match the image build identity (10001:10001).

ensure_betterdesk_user() {

if [ "$(id -u)" != "0" ]; then

return 0

fi

PUID="${PUID:-10001}"

PGID="${PGID:-10001}"

case "$PUID" in

''|*[!0-9]*)

echo "ERROR: PUID must be a positive integer (got: ${PUID})" >&2

exit 1

;;

esac

case "$PGID" in

''|*[!0-9]*)

echo "ERROR: PGID must be a positive integer (got: ${PGID})" >&2

exit 1

;;

esac

if [ "$PUID" = "0" ] || [ "$PGID" = "0" ]; then

echo "ERROR: PUID/PGID must not be 0 (root)" >&2

exit 1

fi

if ! id betterdesk >/dev/null 2>&1; then

echo "ERROR: betterdesk user not found in image" >&2

exit 1

fi

current_uid=$(id -u betterdesk)

current_gid=$(id -g betterdesk)

if [ "$current_uid" = "$PUID" ] && [ "$current_gid" = "$PGID" ]; then

echo "App user: betterdesk (uid=${PUID} gid=${PGID})"

return 0

fi

if ! command -v groupmod >/dev/null 2>&1 || ! command -v usermod >/dev/null 2>&1; then

echo "ERROR: usermod/groupmod not found (shadow package required for PUID/PGID)" >&2

exit 1

fi

if [ "$current_gid" != "$PGID" ]; then

existing_group=$(getent group "$PGID" 2>/dev/null | cut -d: -f1)

if [ -n "$existing_group" ] && [ "$existing_group" != "betterdesk" ]; then

echo "ERROR: PGID ${PGID} already used by group '${existing_group}'" >&2

exit 1

fi

groupmod -g "$PGID" betterdesk || {

echo "ERROR: failed to set betterdesk GID to ${PGID}" >&2

exit 1

}

fi

existing_user=$(getent passwd "$PUID" 2>/dev/null | cut -d: -f1)

if [ -n "$existing_user" ] && [ "$existing_user" != "betterdesk" ]; then

echo "ERROR: PUID ${PUID} already used by user '${existing_user}'" >&2

exit 1

fi

usermod -u "$PUID" -g "$PGID" betterdesk || {

echo "ERROR: failed to set betterdesk UID/GID to ${PUID}:${PGID}" >&2

exit 1

}

echo "App user: betterdesk remapped to uid=${PUID} gid=${PGID}"

}