From c632a850f34b899904934d9df2ee58f7b397be1f Mon Sep 17 00:00:00 2001 From: Micha Date: Thu, 30 Apr 2026 11:32:51 +0200 Subject: [PATCH] Fix Grafana InfluxDB startup permissions Fix Grafana InfluxDB startup permissions --- ops/grafana-influxdb/docker-compose.yml | 7 +++---- ops/grafana-influxdb/scripts/grafana-entrypoint.sh | 4 ++++ 2 files changed, 7 insertions(+), 4 deletions(-) create mode 100644 ops/grafana-influxdb/scripts/grafana-entrypoint.sh diff --git a/ops/grafana-influxdb/docker-compose.yml b/ops/grafana-influxdb/docker-compose.yml index f02b153..0a47619 100644 --- a/ops/grafana-influxdb/docker-compose.yml +++ b/ops/grafana-influxdb/docker-compose.yml @@ -9,13 +9,11 @@ services: GF_SECURITY_ADMIN_PASSWORD__FILE: /run/secrets/grafana_admin_password GF_USERS_ALLOW_SIGN_UP: "false" GF_AUTH_ANONYMOUS_ENABLED: "false" - entrypoint: ["/bin/sh", "-ec"] - command: > - export GRAFANA_INFLUXDB_TOKEN="$$(cat /run/secrets/grafana_influxdb_token)" - && exec /run.sh + entrypoint: ["/bin/sh", "/opt/grafana-wrapper/grafana-entrypoint.sh"] volumes: - /mnt/user/appdata/grafana:/var/lib/grafana - ./provisioning:/etc/grafana/provisioning:ro + - ./scripts:/opt/grafana-wrapper:ro secrets: - grafana_admin_password - grafana_influxdb_token @@ -44,6 +42,7 @@ services: image: influxdb:3.9.1-core container_name: influxdb3-core restart: unless-stopped + user: "0" command: - influxdb3 - serve diff --git a/ops/grafana-influxdb/scripts/grafana-entrypoint.sh b/ops/grafana-influxdb/scripts/grafana-entrypoint.sh new file mode 100644 index 0000000..5db9cab --- /dev/null +++ b/ops/grafana-influxdb/scripts/grafana-entrypoint.sh @@ -0,0 +1,4 @@ +set -eu + +export GRAFANA_INFLUXDB_TOKEN="$(cat /run/secrets/grafana_influxdb_token)" +exec /run.sh