Sync reading position from Moon Reader app to Bookhive atproto records
atproto
bookhive
ereader
moonreader
Pre-create /data/passthrough in the image so non-root startup works
Regression from the security-hardening commit: switching to USER
spacebee (uid 10001) meant Passthrough.__init__'s implicit `/data`
parent mkdir could no longer succeed — UID 10001 has no write access
to /. Pre-create /data/passthrough at build time and chown to the
runtime user so the container boots with or without a mounted volume.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
+2
-1
+2
-1
Dockerfile
+2
-1
Dockerfile
···
12
12
# different UID, override at runtime with `user: "<uid>:<gid>"` in compose.
13
13
RUN groupadd --gid 10001 spacebee \
14
14
&& useradd --uid 10001 --gid 10001 --no-create-home spacebee \
15
-
&& chown -R spacebee:spacebee /app
15
+
&& mkdir -p /data/passthrough \
16
+
&& chown -R spacebee:spacebee /app /data
16
17
USER spacebee
17
18
18
19
ENV PATH="/app/.venv/bin:$PATH" \