From c0c363ee4ff6d2f6a8a7f8f3017d3a2b99ac365b Mon Sep 17 00:00:00 2001
From: Julien <julien.acroute@camptocamp.com>
Date: Mon, 18 Mar 2019 13:58:43 +0100
Subject: [PATCH] Add libnss_wrapper and a wrapper to use it

Compile libnss_wrapper from source and create a script that populate at
runtime passwd/group databases with current running user.
---
 Dockerfile.in  | 16 ++++++++++++++++
 nss_wrapper.sh |  6 ++++++
 2 files changed, 22 insertions(+)
 create mode 100755 nss_wrapper.sh

diff --git a/Dockerfile.in b/Dockerfile.in
index e4bc7b5e2..a98c231be 100644
--- a/Dockerfile.in
+++ b/Dockerfile.in
@@ -26,6 +26,22 @@ RUN apk update --no-cache && apk add \
 
 RUN echo "git-sync:x:65533:65533::/tmp:/sbin/nologin" >> /etc/passwd
 
+# Compile libnss_wrapper (see https://bugs.alpinelinux.org/issues/6710)
+RUN apk add --no-cache --virtual .nss_wrapper-build-deps git build-base cmake cmocka-dev && \
+    git clone git://git.samba.org/nss_wrapper.git && \
+    cd nss_wrapper && \
+    mkdir build && \
+    cd build/ && \
+    mkdir -p /usr/local/include/ && \
+    echo -e "#ifndef NSS__H\n#define NSS__H\n\nenum nss_status\n{\n\tNSS_STATUS_TRYAGAIN = -2,\n\tNSS_STATUS_UNAVAIL = -1,\n\tNSS_STATUS_NOTFOUND = 0,\n\tNSS_STATUS_SUCCESS = 1,\n\tNSS_STATUS_RETURN = 2\n};\n\n#endif" > /usr/local/include/nss.h && \
+    cmake .. -DUNIT_TESTING:BOOL=ON && \
+    make && \
+    make CTEST_OUTPUT_ON_FAILURE=TRUE test && \
+    make install && \
+    rm -fr /nss_wrapper
+
+ADD nss_wrapper.sh /nss_wrapper.sh
+
 WORKDIR /tmp
 USER git-sync:nobody
 ENTRYPOINT ["/{ARG_BIN}"]
diff --git a/nss_wrapper.sh b/nss_wrapper.sh
new file mode 100755
index 000000000..7b537df8d
--- /dev/null
+++ b/nss_wrapper.sh
@@ -0,0 +1,6 @@
+#!/bin/sh
+
+echo "git-sync:x:$(id -u):$(id -g):git-sync:/tmp:/bin/sh" > /tmp/passwd
+echo "git-sync:x:$(id -g):" > /tmp/group
+
+exec /git-sync $*