83 lines
2.4 KiB
Bash
83 lines
2.4 KiB
Bash
|
#!/bin/sh
|
||
|
|
set -eu
|
||
|
|
|
||
|
|
# Ephemeral container: /data is typically tmpfs; never require a host mount.
|
||
|
|
DATA_DIR="${PTS_DATA_DIR:-/data}"
|
||
|
|
mkdir -p "$DATA_DIR"
|
||
|
|
|
||
|
|
# Empty local files only inside the container (discarded when container is removed).
|
||
|
|
if [ ! -f "$DATA_DIR/.env" ]; then
|
||
|
|
touch "$DATA_DIR/.env"
|
||
|
|
fi
|
||
|
|
if [ ! -f "$DATA_DIR/dates.txt" ]; then
|
||
|
|
touch "$DATA_DIR/dates.txt"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Virtual display + noVNC so Teams MFA can be completed interactively in Docker.
|
||
|
|
# Chromium runs headed on DISPLAY; user opens :6080 in browser to click/type.
|
||
|
|
DISPLAY_NUM="${DISPLAY#:}"
|
||
|
|
DISPLAY_NUM="${DISPLAY_NUM:-99}"
|
||
|
|
export DISPLAY=":${DISPLAY_NUM}"
|
||
|
|
VNC_PORT="${TEAMS_VNC_PORT:-6080}"
|
||
|
|
RFB_PORT="${TEAMS_RFB_PORT:-5900}"
|
||
|
|
|
||
|
|
NOVNC_WEB=""
|
||
|
|
for d in /usr/share/novnc /usr/share/novnc/web /usr/share/webapps/novnc; do
|
||
|
|
if [ -d "$d" ] && { [ -f "$d/vnc.html" ] || [ -f "$d/vnc_lite.html" ]; }; then
|
||
|
|
NOVNC_WEB="$d"
|
||
|
|
break
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
if [ -z "$NOVNC_WEB" ] && [ -d /usr/share/novnc ]; then
|
||
|
|
NOVNC_WEB=/usr/share/novnc
|
||
|
|
fi
|
||
|
|
|
||
|
|
start_vnc_stack() {
|
||
|
|
if ! command -v Xvfb >/dev/null 2>&1; then
|
||
|
|
echo "WARN: Xvfb not installed — Teams MFA interactive view unavailable"
|
||
|
|
return 0
|
||
|
|
fi
|
||
|
|
|
||
|
|
# Already running (container restart of app only)
|
||
|
|
if [ -S "/tmp/.X11-unix/X${DISPLAY_NUM}" ] 2>/dev/null || \
|
||
|
|
pgrep -x Xvfb >/dev/null 2>&1; then
|
||
|
|
:
|
||
|
|
else
|
||
|
|
echo "==> Xvfb ${DISPLAY} (Teams MFA virtual display)"
|
||
|
|
Xvfb "${DISPLAY}" -screen 0 1400x900x24 -ac +extension RANDR -nolisten tcp >/tmp/xvfb.log 2>&1 &
|
||
|
|
sleep 0.5
|
||
|
|
fi
|
||
|
|
|
||
|
|
if command -v fluxbox >/dev/null 2>&1; then
|
||
|
|
if ! pgrep -x fluxbox >/dev/null 2>&1; then
|
||
|
|
fluxbox >/tmp/fluxbox.log 2>&1 &
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
|
||
|
|
if command -v x11vnc >/dev/null 2>&1; then
|
||
|
|
if ! pgrep -x x11vnc >/dev/null 2>&1; then
|
||
|
|
echo "==> x11vnc :${RFB_PORT}"
|
||
|
|
x11vnc -display "${DISPLAY}" -forever -shared -rfbport "${RFB_PORT}" \
|
||
|
|
-nopw -xkb -listen 0.0.0.0 -ncache 10 -ncache_cr \
|
||
|
|
>/tmp/x11vnc.log 2>&1 &
|
||
|
|
sleep 0.3
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
|
||
|
|
if command -v websockify >/dev/null 2>&1; then
|
||
|
|
if ! pgrep -f "websockify.*${VNC_PORT}" >/dev/null 2>&1; then
|
||
|
|
echo "==> noVNC http://0.0.0.0:${VNC_PORT}/ (interactive Chrome for MFA)"
|
||
|
|
if [ -n "$NOVNC_WEB" ]; then
|
||
|
|
websockify --web="${NOVNC_WEB}" "${VNC_PORT}" "localhost:${RFB_PORT}" \
|
||
|
|
>/tmp/websockify.log 2>&1 &
|
||
|
|
else
|
||
|
|
websockify "${VNC_PORT}" "localhost:${RFB_PORT}" >/tmp/websockify.log 2>&1 &
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
}
|
||
|
|
|
||
|
|
start_vnc_stack
|
||
|
|
|
||
|
|
exec "$@"
|