Name update

deploy/docker/entrypoint.sh

@@ -0,0 +1,32 @@
+#!/bin/sh
+# Container entrypoint that handles the common bind-mount-as-root case.
+#
+# When volumes are bind-mounted into the container (e.g. `-v ./data/isos:...`),
+# they come up owned by the host uid:gid — often root:root. The pxeforge
+# binary runs as uid 10001 and can't write there. This script, when started
+# as root, chowns the two state dirs to the pxeforge user, then drops
+# privileges via gosu before execing the binary.
+#
+# If the container is already running as non-root (OpenShift does this via
+# its own uid assignment from the SCC), we skip the chown attempt and just
+# exec the binary — OpenShift either preconfigures the volume with fsGroup
+# or the operator is on their own for permissions.
+set -e
+
+PXEFORGE_UID=${PXEFORGE_UID:-10001}
+PXEFORGE_GID=${PXEFORGE_GID:-10001}
+DATA_DIRS="/var/lib/pxeforge/isos /var/lib/pxeforge/work /var/lib/pxeforge/smb"
+
+if [ "$(id -u)" = "0" ]; then
+    for d in $DATA_DIRS; do
+        if [ -d "$d" ]; then
+            chown -R "${PXEFORGE_UID}:${PXEFORGE_GID}" "$d" 2>/dev/null || true
+        fi
+    done
+    # Re-exec ourselves under the pxeforge user so the binary inherits a
+    # clean process environment and a predictable umask.
+    exec gosu "${PXEFORGE_UID}:${PXEFORGE_GID}" /usr/local/bin/pxeforge "$@"
+fi
+
+# Non-root: straight exec, no chown attempt.
+exec /usr/local/bin/pxeforge "$@"