docker-entrypoint.sh

#!/bin/bash
set -e

echo "PGDATA is set to: $PGDATA"

# Detect current user
CURRENT_USER=$(id -u)
CURRENT_USER_NAME=$(id -un)

echo "Running as user: $CURRENT_USER_NAME (UID: $CURRENT_USER)"

# Check if running as root (not recommended)
if [ "$CURRENT_USER" = "0" ]; then
    echo "WARNING: Running as root is not recommended for security reasons."
    echo "This mode is only for fixing permission issues."

    # Check if PGDATA exists and has wrong ownership
    if [ -d "$PGDATA" ]; then
        PGDATA_OWNER=$(stat -c '%u' "$PGDATA" 2>/dev/null || stat -f '%u' "$PGDATA" 2>/dev/null || echo "999")
        if [ "$PGDATA_OWNER" != "999" ]; then
            echo "Fixing PGDATA ownership: $PGDATA (currently owned by UID $PGDATA_OWNER)"
            chown -R postgres:postgres "$PGDATA" "$PGCONFIG_CONFIG_DIR" /var/lib/postgresql 2>/dev/null || true
            echo "Permissions fixed. Please restart the container without --user root flag."
            echo "Example: docker run -v <volume>:/var/lib/postgresql/data flanksource/postgres:latest"
            exit 0
        fi
    fi

    echo "Continuing as root (not recommended). Consider restarting as postgres user."
fi

# Run postgres-cli auto-start (includes permission checks)
postgres-cli auto-start --pg-tune --auto-upgrade --upgrade-to=$PG_VERSION --auto-init --data-dir "$PGDATA" -vvvv

if [ "$AUTO_UPGRADE" = "true" ] && [ "$UPGRADE_ONLY" = "true" ]; then
    echo "UPGRADE_ONLY is set. Exiting after upgrade."
    exit 0
fi

export PGBIN=/usr/lib/postgresql/${PG_VERSION}/bin

# Start PostgreSQL server
exec "$PGBIN/postgres" "$@"