From eb465096b1805e03ce2864eb11494b7cfd1a9d25 Mon Sep 17 00:00:00 2001 From: liguobao Date: Fri, 23 May 2025 17:12:23 +0800 Subject: [PATCH] fix: fix ssrf_proxy docker run permissions --- docker/docker-compose.yaml | 2 -- docker/ssrf_proxy/docker-entrypoint.sh | 3 +++ 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/docker/docker-compose.yaml b/docker/docker-compose.yaml index d98c21d740..494d8e3a30 100644 --- a/docker/docker-compose.yaml +++ b/docker/docker-compose.yaml @@ -684,8 +684,6 @@ services: volumes: - ./ssrf_proxy/squid.conf.template:/etc/squid/squid.conf.template - ./ssrf_proxy/docker-entrypoint.sh:/docker-entrypoint-mount.sh - - ./volumes/ssrf_proxy/logs:/var/log/squid - - ./volumes/ssrf_proxy/cache:/var/spool/squid entrypoint: [ 'sh', '-c', "cp /docker-entrypoint-mount.sh /docker-entrypoint.sh && sed -i 's/\r$$//' /docker-entrypoint.sh && chmod +x /docker-entrypoint.sh && /docker-entrypoint.sh" ] environment: # pls clearly modify the squid env vars to fit your network environment. diff --git a/docker/ssrf_proxy/docker-entrypoint.sh b/docker/ssrf_proxy/docker-entrypoint.sh index 613897bb7d..3e945c80cd 100755 --- a/docker/ssrf_proxy/docker-entrypoint.sh +++ b/docker/ssrf_proxy/docker-entrypoint.sh @@ -20,6 +20,9 @@ echo "[ENTRYPOINT] re-create snakeoil self-signed certificate removed in the bui if [ ! -f /etc/ssl/private/ssl-cert-snakeoil.key ]; then /usr/sbin/make-ssl-cert generate-default-snakeoil --force-overwrite > /dev/null 2>&1 fi +# ssrf_proxy is not running as root, so we need to set the permissions +chown -R 13:13 /var/log/squid /var/spool/squid /var/cache/squid + tail -F /var/log/squid/access.log 2>/dev/null & tail -F /var/log/squid/error.log 2>/dev/null &