chore: Migrate to gosu

Author: marcbachmann

README.md

@@ -120,4 +120,4 @@ SELECT pg_terminate_backend(pg_stat_activity.pid) FROM pg_stat_activity WHERE pi
 Then promote the replica. There are two options:
 - Create the `promote.signal` in the data directory `touch /var/lib/postgresql/data/promote.signal` on the replica.
   If you've changed your configuration, make sure `promote_trigger_file` declares that path.
-- Execute `su-exec postgres pg_ctl promote` in the container.
+- Execute `gosu postgres pg_ctl promote` in the container.

scripts/backup

@@ -1,3 +1,3 @@
 #!/bin/bash
 if [ "$(id -u)" == "1000" ]; then exec wal-g backup-push "$PGDATA" --config="$WALG_CONFIG_FILE"; fi
-exec su-exec postgres wal-g backup-push "$PGDATA" --config="$WALG_CONFIG_FILE"
+exec gosu postgres wal-g backup-push "$PGDATA" --config="$WALG_CONFIG_FILE"

scripts/entrypoint

@@ -14,7 +14,7 @@ if [ "$first" == "psql" ] || [ "$first" == "postgres" ] || [ "$first" == "pg_ctl
   if [ "$first" == "postgres" ] && [ ! -s "$PGDATA/PG_VERSION" ]; then /scripts/initdb; fi
 
   [ "$(id -u)" == "1000" ] && exec "$@"
-  exec su-exec postgres "$@"
+  exec gosu postgres "$@"
 fi
 
 exec "$@"

scripts/initdb

@@ -1,6 +1,6 @@
 #!/bin/bash
 set -Eeo pipefail
-if [ "$(id -u)" != "1000" ] ; then exec su-exec postgres "$BASH_SOURCE" "$@"; fi
+if [ "$(id -u)" != "1000" ] ; then exec gosu postgres "$BASH_SOURCE" "$@"; fi
 
 source /usr/local/bin/docker-entrypoint.sh
 

scripts/pghba

@@ -1,6 +1,6 @@
 #!/bin/bash
 set -Eeo pipefail
-if [ "$(id -u)" != "1000" ] ; then exec su-exec postgres "$BASH_SOURCE" "$@"; fi
+if [ "$(id -u)" != "1000" ] ; then exec gosu postgres "$BASH_SOURCE" "$@"; fi
 
 TRUST=$1
 if [ "$TRUST" == "" ] && [ "$POSTGRES_HOST_AUTH_METHOD" != "" ]; then TRUST=$POSTGRES_HOST_AUTH_METHOD; fi

scripts/recover

@@ -1,6 +1,6 @@
 #!/bin/bash
 set -Eeo pipefail
-if [ "$(id -u)" != "1000" ] ; then exec su-exec postgres "$BASH_SOURCE" "$@"; fi
+if [ "$(id -u)" != "1000" ] ; then exec gosu postgres "$BASH_SOURCE" "$@"; fi
 source /usr/local/bin/docker-entrypoint.sh
 
 # When recovering, the database directory must be empty

scripts/standby

@@ -1,6 +1,6 @@
 #!/bin/bash
 set -Eeo pipefail
-if [ "$(id -u)" != "1000" ] ; then exec su-exec postgres "$BASH_SOURCE" "$@"; fi
+if [ "$(id -u)" != "1000" ] ; then exec gosu postgres "$BASH_SOURCE" "$@"; fi
 
 if [ -s "$PGDATA/PG_VERSION" ]; then exec postgres; fi
 /scripts/recover -R "$@"

scripts/tuneconfig

@@ -1,6 +1,6 @@
 #!/bin/bash
 set -Eeo pipefail
-if [ "$(id -u)" != "1000" ] ; then exec su-exec postgres "$BASH_SOURCE" "$@"; fi
+if [ "$(id -u)" != "1000" ] ; then exec gosu postgres "$BASH_SOURCE" "$@"; fi
 
 # Set the default socket directory to /var/run/postgresql or $PGHOST
 sed -i "s?.*unix_socket_directories =.*?unix_socket_directories = '$PGHOST'?g" $PGDATA/postgresql.conf

scripts/upgrade

@@ -59,9 +59,9 @@ if [ -d "$PGDATANEW" ]; then
 fi
 
 if [ "$(id -u)" != "1000" ] ; then
-	PGDATA="$PGDATANEW" su-exec postgres:postgres $PGBINNEW/initdb
-	PGDATA="$PGDATANEW" su-exec postgres:postgres /scripts/tuneconfig
-	su-exec postgres:postgres pg_upgrade --link -j $(getconf _NPROCESSORS_ONLN)
+	PGDATA="$PGDATANEW" gosu postgres:postgres $PGBINNEW/initdb
+	PGDATA="$PGDATANEW" gosu postgres:postgres /scripts/tuneconfig
+	gosu postgres:postgres pg_upgrade --link -j $(getconf _NPROCESSORS_ONLN)
 else
 	PGDATA="$PGDATANEW" $PGBINNEW/initdb
 	PGDATA="$PGDATANEW" /scripts/tuneconfig