meatbag/baseimage-alpine
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Default to sanitizing newlines in secrets

Browse source
This commit is contained in:
TheSpad 2023-10-31 16:54:52 +00:00
parent 00db510002
commit 6bb5231d17
No known key found for this signature in database
GPG key ID: 08F06191F4587860
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
root/etc/s6-overlay/s6-rc.d/init-envfile/run
View file

@ -7,7 +7,11 @@ if find /run/s6/container_environment/*"FILE__"* -maxdepth 1 > /dev/null 2>&1; t
SECRETFILE=$(cat "${FILENAME}") SECRETFILE=$(cat "${FILENAME}")
if [[ -f ${SECRETFILE} ]]; then if [[ -f ${SECRETFILE} ]]; then
FILESTRIP=${FILENAME//FILE__/} FILESTRIP=${FILENAME//FILE__/}
if [[ ${SECRET_NO_SANITIZE,,} = "true" ]]; then
cat "${SECRETFILE}" >"${FILESTRIP}" cat "${SECRETFILE}" >"${FILESTRIP}"
else
tr -d '\n' < "${SECRETFILE}" >"${FILESTRIP}"
fi
echo "[env-init] ${FILESTRIP##*/} set from ${FILENAME##*/}" echo "[env-init] ${FILESTRIP##*/} set from ${FILENAME##*/}"
else else
echo "[env-init] cannot find secret in ${FILENAME##*/}" echo "[env-init] cannot find secret in ${FILENAME##*/}"