docker/main/rootfs/etc/s6-overlay/s6-rc.d/certsync-log/run

#!/command/with-contenv bash
# shellcheck shell=bash

if [[ "$(id -u)" -eq 0 ]]; then
    # logutil-service drops to nobody and applies S6_LOGGING_SCRIPT
    exec logutil-service /dev/shm/logs/certsync
fi

# Non-root (--user) fallback: logutil-service cannot change UID, so run
# s6-log directly with the same directives S6_LOGGING_SCRIPT configures.
# shellcheck disable=SC2086
exec s6-log ${S6_LOGGING_SCRIPT:-T 1 n0 s10000000 T} /dev/shm/logs/certsync
TLS support (#11678 ) 2024-06-01 10:29:46 -05:00			`#!/command/with-contenv bash`
			`# shellcheck shell=bash`

Container security hardening (phase 2) (#24068 ) 2026-08-23 15:40:32 -05:00			`if [[ "$(id -u)" -eq 0 ]]; then`
			`# logutil-service drops to nobody and applies S6_LOGGING_SCRIPT`
			`exec logutil-service /dev/shm/logs/certsync`
			`fi`

			`# Non-root (--user) fallback: logutil-service cannot change UID, so run`
			`# s6-log directly with the same directives S6_LOGGING_SCRIPT configures.`
			`# shellcheck disable=SC2086`
			`exec s6-log ${S6_LOGGING_SCRIPT:-T 1 n0 s10000000 T} /dev/shm/logs/certsync`