Remove prviliges drop when you never ran as root (#34837)

2026-06-01 13:54:18 +10:00
parent 064875a540
commit 380ce4789b
5 changed files with 26 additions and 13 deletions
@@ -42,4 +42,6 @@ if [ -d /run/service/.s6-svscan ]; then
    done
 fi

+# Skip the drop when already non-root.
+[ "$(id -u)" = 0 ] || exec /opt/hermes/.venv/bin/python -m hermes_cli.container_boot
 exec s6-setuidgid hermes /opt/hermes/.venv/bin/python -m hermes_cli.container_boot