[client] Preserve executable access in rootless image

Keep the binary and entrypoint executable when deployments override the runtime group. Retain root ownership so non-root users cannot modify either file.
This commit is contained in:
jnfrati
2026-09-07 16:45:29 +02:00
parent 8b4bff228b
commit e9bea322fa
+2 -2
View File
@@ -32,5 +32,5 @@ ENV \
ENTRYPOINT [ "/usr/local/bin/netbird-entrypoint.sh" ]
ARG TARGETPLATFORM
ARG NETBIRD_BINARY=$TARGETPLATFORM/netbird
COPY --chown=0:0 --chmod=0750 client/netbird-entrypoint.sh /usr/local/bin/netbird-entrypoint.sh
COPY --chown=0:0 --chmod=0750 "${NETBIRD_BINARY}" /usr/local/bin/netbird
COPY --chown=0:0 --chmod=0755 client/netbird-entrypoint.sh /usr/local/bin/netbird-entrypoint.sh
COPY --chown=0:0 --chmod=0755 "${NETBIRD_BINARY}" /usr/local/bin/netbird