update cdn

services/cdn/chall/entrypoint.sh

@@ -0,0 +1,78 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+umask 002  # group-writable (helps with bind mounts)
+
+APP_DIR="/app"
+UPLOADS_DIR="${APP_DIR}/uploads"
+DATA_DIR="/data"
+DBFILE="${DATA_DIR}/app.db"
+FLAG_FILE="/flag.txt"
+
+mkdir -p "${UPLOADS_DIR}" "${DATA_DIR}"
+
+# Make sure runtime dirs are writable (bind-mounts may ignore chown; that's OK)
+chown -R ctfuser:ctfuser "${UPLOADS_DIR}" "${DATA_DIR}" 2>/dev/null || true
+chmod 775 "${UPLOADS_DIR}" "${DATA_DIR}" || true
+
+# ------- Start SSH (and set password if provided) -------
+if [[ -n "${SSH_PASSWORD:-}" ]]; then
+  echo "ctfuser:${SSH_PASSWORD}" | chpasswd || true
+fi
+
+if command -v service >/dev/null 2>&1; then
+  service ssh start || /usr/sbin/sshd &
+else
+  /usr/sbin/sshd &
+fi
+# -------------------------------------------------------
+
+# Initialize DB AS ctfuser (so SQLite can write WAL/SHM next to it)
+su -s /bin/bash -c "python - <<'PY'
+import app as m
+from contextlib import contextmanager
+
+@contextmanager
+def ctx():
+    with m.app.app_context():
+        yield
+
+with ctx():
+    # your function should create tables if missing
+    m.init_db()
+    # OPTIONAL: if you had a generate_flag_at_boot, call it here as well
+    try:
+        m.generate_flag_at_boot()
+    except Exception:
+        pass
+print('DB initialized by ctfuser.')
+PY
+" ctfuser
+
+# OPTIONAL: if your filesystem dislikes WAL, uncomment:
+# su -s /bin/bash -c \"python - <<'PY'
+# import sqlite3
+# import os
+# db = sqlite3.connect(os.environ.get('DB_PATH', '${DBFILE}'))
+# db.execute('PRAGMA journal_mode=DELETE;')
+# db.execute('PRAGMA synchronous=NORMAL;')
+# db.close()
+# print('SQLite journal_mode=DELETE applied.')
+# PY
+# \" ctfuser
+
+# Secure the flag file if present
+if [ -d "${FLAG_FILE}" ]; then
+  if [ -f "${FLAG_FILE}" ]; then
+    chown root:root "${FLAG_FILE}" || true
+    chmod 444 "${FLAG_FILE}" || true
+  fi
+else
+  if [ -f "${FLAG_FILE}" ]; then
+    chown root:root "${FLAG_FILE}" || true
+    chmod 444 "${FLAG_FILE}" || true
+  fi
+fi
+
+echo "Starting Flask app on 0.0.0.0:8000 as ctfuser…"
+exec su -s /bin/bash -c "cd '${APP_DIR}' && python app.py" ctfuser