Antigravity Developer
b6bf4b6640
The jlesage/baseimage-gui sets XDG_CONFIG_HOME=/config/xdg/config at runtime, so Chrome was writing its profile to /config/xdg/config/google-chrome which lived on ephemeral storage. This caused Chrome to open as a fresh install on every pod restart. Changes: - Mount the PVC at /config instead of /home (aligns with baseimage-gui convention) - Move user home directory to /config/userdata (on the PVC) - Add explicit --user-data-dir for Chrome pointing to PVC path - Clean up Chrome crash lock files and patch Preferences on startup to prevent session/cookie loss after unclean pod shutdown - Update all scripts (sshd, init-repo, cont-init) to use new paths - Remove unnecessary cont-init-home.sh Generated with [Claude Code](https://claude.ai/code) via [Happy](https://happy.engineering) Co-Authored-By: Claude <noreply@anthropic.com> Co-Authored-By: Happy <yesreply@happy.engineering>
46 lines
1.6 KiB
Bash
46 lines
1.6 KiB
Bash
#!/bin/sh
|
|
# Start OpenSSH server when SSH=true.
|
|
# Runs as root during container initialisation (cont-init.d).
|
|
[ "${SSH:-false}" = "true" ] || exit 0
|
|
|
|
echo "=== SSH enabled: starting sshd ==="
|
|
|
|
HOME_DIR="/config/userdata"
|
|
HOST_KEY_STORE="$HOME_DIR/.ssh/host_keys"
|
|
|
|
# Persist host keys on the home PVC so clients don't see a "host key
|
|
# changed" warning after pod restarts.
|
|
if [ -d "$HOST_KEY_STORE" ] && [ -n "$(ls "$HOST_KEY_STORE"/ssh_host_* 2>/dev/null)" ]; then
|
|
# Restore previously generated host keys
|
|
echo "Restoring SSH host keys from PVC..."
|
|
cp "$HOST_KEY_STORE"/ssh_host_* /etc/ssh/
|
|
chmod 600 /etc/ssh/ssh_host_*_key
|
|
chmod 644 /etc/ssh/ssh_host_*_key.pub
|
|
else
|
|
# First boot: generate and save host keys to PVC
|
|
echo "Generating SSH host keys (first boot)..."
|
|
ssh-keygen -A 2>/dev/null || true
|
|
mkdir -p "$HOST_KEY_STORE"
|
|
cp /etc/ssh/ssh_host_* "$HOST_KEY_STORE/"
|
|
chmod 700 "$HOST_KEY_STORE"
|
|
chown -R 1000:1000 "$HOST_KEY_STORE"
|
|
echo "SSH host keys saved to PVC."
|
|
fi
|
|
|
|
# Populate authorized_keys from env var (injected via Kubernetes secret)
|
|
if [ -n "$SSH_AUTHORIZED_KEYS" ]; then
|
|
mkdir -p "$HOME_DIR/.ssh"
|
|
chmod 700 "$HOME_DIR/.ssh"
|
|
printf '%s\n' "$SSH_AUTHORIZED_KEYS" > "$HOME_DIR/.ssh/authorized_keys"
|
|
chmod 600 "$HOME_DIR/.ssh/authorized_keys"
|
|
chown -R 1000:1000 "$HOME_DIR/.ssh"
|
|
echo "SSH authorized keys configured."
|
|
else
|
|
echo "WARNING: SSH_AUTHORIZED_KEYS not set — you will not be able to log in."
|
|
fi
|
|
|
|
# Start sshd in background (root required to bind :22 and fork sessions)
|
|
/usr/sbin/sshd -D &
|
|
|
|
echo "sshd started (PID $!)"
|