From 00dc1702317568276517e7f1afeaef4f6f07974a Mon Sep 17 00:00:00 2001
From: aj-bw <81774843+aj-bw@users.noreply.github.com>
Date: Tue, 26 Aug 2025 08:47:19 -0400
Subject: [PATCH] add shadow package, restore entrypoint functionality (#16124)

---
 apps/web/Dockerfile    | 1 +
 apps/web/entrypoint.sh | 9 +++++----
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/apps/web/Dockerfile b/apps/web/Dockerfile
index 7ac2223ab10..6017d60df5f 100644
--- a/apps/web/Dockerfile
+++ b/apps/web/Dockerfile
@@ -67,6 +67,7 @@ EXPOSE 5000
 
 RUN apk add --no-cache curl \
     icu-libs \
+    shadow \
     && apk add --no-cache --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community gosu
 
 # Copy app from the build stage
diff --git a/apps/web/entrypoint.sh b/apps/web/entrypoint.sh
index 72fd2b43b1d..96bb7773534 100644
--- a/apps/web/entrypoint.sh
+++ b/apps/web/entrypoint.sh
@@ -22,10 +22,11 @@ fi
 if [ "$(id -u)" = "0" ]; then
     # Create user and group
 
-    addgroup -g "$LGID" -S "$GROUPNAME" 2>/dev/null || true
-    adduser -u "$LUID" -G "$GROUPNAME" -S -D -H "$USERNAME" 2>/dev/null || true
-    mkdir -p /home/$USERNAME
-    chown $USERNAME:$GROUPNAME /home/$USERNAME
+    groupadd -o -g $LGID $GROUPNAME >/dev/null 2>&1 ||
+    groupmod -o -g $LGID $GROUPNAME >/dev/null 2>&1
+    useradd -o -u $LUID -g $GROUPNAME -s /bin/false $USERNAME >/dev/null 2>&1 ||
+    usermod -o -u $LUID -g $GROUPNAME -s /bin/false $USERNAME >/dev/null 2>&1
+    mkhomedir_helper $USERNAME
 
     # The rest...