bitdeals 29a0957cb7 feat: refuse to start as root ...

The image runs as its own unprivileged user, and everything in run.sh now
assumes it: keys.dat is worked on by its owner, no privilege is dropped
anywhere, and what confines the container is whatever the caller passed.
Started as root by a `user:` override, none of that holds and the container
looks identical from outside -- a silent loss of every property this image
was changed to have.

Four lines at the top of run.sh, and the reason is then the first line of
`docker logs`. It is the same bargain as the build-time checks: a wrong
posture should fail loudly rather than pass for a right one.

2026-09-09 13:45:09 +00:00

..

__pycache__

fix: drop privileges with a helper of our own, not setpriv

2026-09-09 12:33:18 +00:00

Dockerfile

refactor: no root in this container at all

2026-09-09 13:23:28 +00:00

healthy_check.py

escape the sed replacements, and stop the script failing silently

2026-08-02 13:13:56 +00:00

run.sh

feat: refuse to start as root

2026-09-09 13:45:09 +00:00

seed_addr_gen.py

escape the sed replacements, and stop the script failing silently

2026-08-02 13:13:56 +00:00

watchdog.py

feat: supervise the daemon, and restart one that has lost every peer

2026-09-04 09:53:07 +00:00