Add fuse callbacks

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

support/Containerfile

@@ -18,11 +18,11 @@ COPY .sqlx ./.sqlx
 RUN cargo build $(if [ "$BUILD_MODE" = "release" ]; then echo "--release"; else echo ""; fi)
 RUN mkdir -p build && cp target/$(if [ "$BUILD_MODE" = "release" ]; then echo "release"; else echo "debug"; fi)/glyph build/glyph
 
-FROM docker.io/library/debian:bookworm-slim
+FROM docker.io/authelia/authelia
 
-COPY --from=builder /app/build/glyph /usr/local/bin/glyph
+COPY --from=builder /app/build/glyph /usr/bin/glyph
+COPY --from=builder /usr/lib/x86_64-linux-gnu/libfuse3.so.3 /usr/lib/x86_64-linux-gnu/libfuse3.so.3
+COPY --from=builder /usr/lib/x86_64-linux-gnu/libgcc_s.so.1 /usr/lib/x86_64-linux-gnu/libgcc_s.so.1
 
-EXPOSE 8080/tcp
-
-ENTRYPOINT ["/usr/local/bin/glyph"]
+ENTRYPOINT ["/usr/bin/glyph"]
 CMD ["--help"]

support/manifest.yaml

@@ -6,11 +6,21 @@ spec:
   containers:
     - name: glyph
       image: registry.karaolidis.com/karaolidis/glyph:latest
+      securityContext:
+        privileged: true
+      capabilities:
+        add:
+          - SYS_ADMIN
+      resources:
+        limits:
+          podman.io/device=/dev/fuse: 1
       volumeMounts:
         - name: glyph-config
           mountPath: /etc/glyph
-        - name: authelia-users
-          mountPath: /etc/authelia/users
+        - name: authelia-config
+          mountPath: /etc/authelia/config
+        - name: authelia-storage
+          mountPath: /var/lib/authelia
       command:
         [
           "glyph",
@@ -18,6 +28,9 @@ spec:
           "/etc/glyph/default.yml",
           --log-config,
           "/etc/glyph/log4rs.yml",
+          "--",
+          "--config",
+          "/etc/authelia/config/configuration.yml",
         ]
 
     - name: postgresql
@@ -36,22 +49,6 @@ spec:
     - name: redis
       image: docker.io/library/redis:latest
 
-    - name: authelia
-      image: docker.io/authelia/authelia:latest
-      volumeMounts:
-        - name: authelia-config
-          mountPath: /etc/authelia
-        - name: authelia-users
-          mountPath: /etc/authelia/users
-        - name: authelia-storage
-          mountPath: /var/lib/authelia
-      command:
-        [
-          "/bin/sh",
-          "-c",
-          "cp /etc/authelia/users.yml /etc/authelia/users/users.yml && exec authelia --config /etc/authelia/configuration.yml",
-        ]
-
     - name: traefik
       image: docker.io/library/traefik:latest
       args:
@@ -72,13 +69,11 @@ spec:
     - name: authelia-config
       configMap:
         name: authelia-config
-    - name: authelia-users
-      emptyDir: {}
-    - name: authelia-storage
-      emptyDir: {}
     - name: traefik-config
       configMap:
         name: traefik-config
+    - name: authelia-storage
+      emptyDir: {}
 ---
 apiVersion: v1
 kind: ConfigMap
@@ -89,13 +84,6 @@ data:
     server:
       host: https://app.glyph.local
 
-    database:
-      host: postgresql
-      port: 5432
-      user: glyph
-      password: glyph
-      database: glyph
-
     oauth:
       issuer_url: https://id.glyph.local
       client_id: glyph
@@ -103,13 +91,27 @@ data:
       admin_group: admins
       insecure: true
 
-    authelia:
-      user_database: /etc/authelia/users/users.yml
+    fuse:
+      mount_directory: /etc/authelia/users
+      user_database_name: users.yml
+
+    postgresql:
+      host: postgresql
+      port: 5432
+      user: glyph
+      password: glyph
+      database: glyph
 
     redis:
       host: redis
       port: 6379
 
+    admin:
+      name: glyph
+      display_name: Glyph
+      password: glyph
+      email: glyph@karaolidis.com
+
   log4rs.yml: |
     appenders:
       stdout:
@@ -198,13 +200,6 @@ data:
             redirect_uris:
               - "https://app.glyph.local/api/auth/callback"
             authorization_policy: "one_factor"
-  users.yml: |
-    users:
-      glyph:
-        displayname: "glyph"
-        password: "$argon2id$v=19$m=65536,t=3,p=4$lobLBhv2SKyVZZZCl+e8Lg$VzPmcTksXBNlJfeztMUqMDgdU47qT5bB1Gk+QHigASQ" # The digest of 'glyph'.
-        groups:
-          - "admins"
 ---
 apiVersion: v1
 kind: ConfigMap
@@ -232,7 +227,7 @@ data:
         authelia-service:
           loadBalancer:
             servers:
-              - url: "http://authelia:9091"
+              - url: "http://glyph:9091"
 
         glyph-service:
           loadBalancer: