entrypoint.sh

#!/bin/bash
set -e

USER_UID=${USER_UID:-1000}
USER_GID=${USER_GID:-1000}

BROWSER_BOX_USER=${BROWSER_BOX_USER:-browser}
BROWSER_BOX_REPO=${BROWSER_BOX_REPO:-sameersbn}

install_browser_box() {
  echo "Installing browser-box..."
  install -m 0755 /var/cache/browser-box/browser-box /target/
  echo "Installing google-chrome..."
  ln -sf browser-box /target/google-chrome
  echo "Installing google-chrome-stable..."
  ln -sf browser-box /target/google-chrome-stable
  echo "Installing tor-browser..."
  ln -sf browser-box /target/tor-browser
  echo "Installing chromium-browser..."
  ln -sf browser-box /target/chromium-browser
  echo "Installing firefox..."
  ln -sf browser-box /target/firefox
  echo "Installing url luancher..."
  ln -sf browser-box /target/browser-exec
  if [ "${BROWSER_BOX_USER}" != "browser" ] && [ -n "${BROWSER_BOX_USER}" ]; then
    echo "Updating user to ${BROWSER_BOX_USER}..."
    sed -i -e s%"BROWSER_BOX_USER:-browser"%"BROWSER_BOX_USER:-${BROWSER_BOX_USER}"%1 /target/browser-box
  fi
  if [[ -n "${CHROME_USERDATA}" ]]; then
    echo "Updating Chrome user volume..."
    sed -i -e s%"CHROME_USERDATA=.*$"%"CHROME_USERDATA\=${CHROME_USERDATA}"%1 /target/browser-box
  fi
  if [[ -n "${FIREFOX_USERDATA}" ]]; then
    echo "Updating FireFox user volume..."
    sed -i -e s%"FIREFOX_USERDATA=.*$"%"FIREFOX_USERDATA\=${FIREFOX_USERDATA}"%1 /target/browser-box
  fi
  sed -i -e s%"\(BROWSER_BOX_REPO=\).*$"%"\1${BROWSER_BOX_REPO}"%1 /target/browser-box

}

uninstall_browser_box() {
  echo "Uninstalling browser-box..."
  rm -rf /target/browser-box
  echo "Uninstalling google-chrome..."
  rm -rf /target/google-chrome
  echo "Uninstalling google-chrome-stable..."
  rm -rf /target/google-chrome-stable
  echo "Uninstalling tor-browser..."
  rm -rf /target/tor-browser
  echo "Uninstalling chromium-browser..."
  rm -rf /target/chromium-browser
  echo "Uninstalling firefox..."
  rm -rf /target/firefox
  echo "Uninstalling url launcher..."
  rm -rf /target/browser-exec
}

create_user() {
  # ensure home directory is owned by browser
  # and that profile files exist
  if [[ -d /home/${BROWSER_BOX_USER} ]]; then
    chown ${USER_UID}:${USER_GID} /home/${BROWSER_BOX_USER}
    # copy user files from /etc/skel
    cp /etc/skel/.bashrc /home/${BROWSER_BOX_USER}
    cp /etc/skel/.bash_logout /home/${BROWSER_BOX_USER}
    cp /etc/skel/.profile /home/${BROWSER_BOX_USER}
    chown ${USER_UID}:${USER_GID} \
		/home/${BROWSER_BOX_USER}/.bashrc \
		/home/${BROWSER_BOX_USER}/.profile \
		/home/${BROWSER_BOX_USER}/.bash_logout
  fi
  # create group with USER_GID
  if ! getent group ${BROWSER_BOX_USER} >/dev/null; then
    groupadd -f -g ${USER_GID} ${BROWSER_BOX_USER} 2> /dev/null
  fi

  # create user with USER_UID
  if ! getent passwd ${BROWSER_BOX_USER} >/dev/null; then
    adduser --disabled-login --uid ${USER_UID} --gid ${USER_GID} \
      --gecos 'Browser Box' ${BROWSER_BOX_USER}
  fi

  # fixes issue #7
  chown -R ${BROWSER_BOX_USER}: /usr/lib/tor-browser
}

grant_access_to_video_devices() {
  for device in /dev/video*
  do
    if [[ -c $device ]]; then
      VIDEO_GID=$(stat -c %g $device)
      VIDEO_GROUP=$(stat -c %G $device)
      if [[ ${VIDEO_GROUP} == "UNKNOWN" ]]; then
        VIDEO_GROUP=browser-box-video
        groupadd -g ${VIDEO_GID} ${VIDEO_GROUP}
      fi
      usermod -a -G ${VIDEO_GROUP} ${BROWSER_BOX_USER}
      break
    fi
  done
}

launch_browser() {
  cd /home/${BROWSER_BOX_USER}
  exec sudo -HEu ${BROWSER_BOX_USER} PULSE_SERVER=/run/pulse/native $@ ${extra_opts}
}

case "$1" in
  install)
    install_browser_box
    ;;
  uninstall)
    uninstall_browser_box
    ;;
  google-chrome|google-chrome-stable|tor-browser|chromium-browser|firefox)
    create_user
    grant_access_to_video_devices
    launch_browser $@
    ;;
  *)
    exec $@
    ;;
esac