add uid/gid selection to run application as in Dockerfile

Reviewed-on: #21

Dockerfile

@@ -18,13 +18,20 @@ RUN touch ${DATA_PATH}/pv-groups.json && \
 # Generate unicode locale so that cyrillic characters display properly
 RUN apt-get update -y && apt-get install -y locales && \
     echo en_US.UTF-8 UTF-8 > /etc/locale.gen && \
-    dpkg-reconfigure --frontend=noninteractive locales
+    dpkg-reconfigure --frontend=noninteractive locales && \
+    rm -Rf var/lib/apt/lists/*
 ENV LANG en_US.UTF-8
 
 
 VOLUME ${DATA_PATH}
 
 
+EXPOSE 25565/tcp
+
+
+ENV GID=988
+ENV UID=999
+
 ENV MEMORY=4G
 
 ENV PROXY_SECRET=00000000-0000-0000-0000-000000000000
@@ -60,13 +67,19 @@ ENV SONAR_DB_NAME=sonar_db
 ENV SONAR_DB_USERNAME=sonar
 ENV SONAR_DB_PASSWORD=0000
 
-WORKDIR ${WORKDIR_PATH}/config
 
-EXPOSE 25565/tcp
+WORKDIR ${WORKDIR_PATH}/config
 
 # TODO: Make awk commands sapn multiple lines
 # TODO: Use one call to awk to perform substitutions
 CMD \
+    # Create and switch to user with desired UID and GID.
+    # All processes that create/change files in ${DATA_PATH}
+    # must be run under this user.
+    groupadd -g ${GID} worker && \
+    useradd -M -g ${GID} -u ${UID} worker && \
+    chmod -R o-rwx ${WORKDIR_PATH} && \
+
     # Add proxy secret
     sed -i "s/_PROXY_SECRET_/${PROXY_SECRET}/g" forwarding.secret && \
 
@@ -115,4 +128,7 @@ CMD \
     sed -i "s/_SONAR_DB_USERNAME_/${SONAR_DB_USERNAME}/g" plugins/sonar/config.yml && \
     sed -i "s/_SONAR_DB_PASSWORD_/${SONAR_DB_PASSWORD}/g" plugins/sonar/config.yml && \
 
-    java -Xms${MEMORY} -Xmx${MEMORY} -XX:+UseG1GC -XX:G1HeapRegionSize=4M -XX:+UnlockExperimentalVMOptions -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:MaxInlineLevel=15 -jar *.jar
+    # Change UID and GID of used files to desired values.
+    chown -R worker:worker ${WORKDIR_PATH} && \
+
+    su worker -c "java -Xms${MEMORY} -Xmx${MEMORY} -XX:+UseG1GC -XX:G1HeapRegionSize=4M -XX:+UnlockExperimentalVMOptions -XX:+ParallelRefProcEnabled -XX:+AlwaysPreTouch -XX:MaxInlineLevel=15 -jar *.jar"

src/plugins/luckperms/config.yml

@@ -403,7 +403,7 @@ auto-install-translations: true
 meta-formatting:
   prefix:
     format:
-      - highest_on_track_staff
+      - highest_on_track_roles
       - highest_on_track_clans
     duplicates: first-only
     start-spacer: "<dark_grey>[</dark_grey>"

src/plugins/luckperms/luckperms.json

@@ -6,6 +6,22 @@
   "groups": {
     "role_admin": {
       "nodes": [
+        {
+          "type": "permission",
+          "key": "bmarker.command.markers",
+          "value": true,
+          "context": {
+            "server": "survival"
+          }
+        },
+        {
+          "type": "permission",
+          "key": "bmarker.command.sets",
+          "value": true,
+          "context": {
+            "server": "survival"
+          }
+        },
         {
           "type": "permission",
           "key": "coreprotect.restore",
@@ -477,14 +493,6 @@
             "server": "survival"
           }
         },
-        {
-          "type": "permission",
-          "key": "openinv.enderchest.open.other",
-          "value": true,
-          "context": {
-            "server": "survival"
-          }
-        },
         {
           "type": "permission",
           "key": "openinv.inventory.open.other",
@@ -609,6 +617,15 @@
         }
       ]
     },
+    "clan_eye": {
+      "nodes": [
+        {
+          "type": "prefix",
+          "key": "prefix.10.<black>ОКО 👁</black>",
+          "value": true
+        }
+      ]
+    },
     "default": {
       "nodes": [
         {
@@ -899,6 +916,11 @@
           "key": "skinsrestorer.command.set",
           "value": true
         },
+        {
+          "type": "permission",
+          "key": "skinsrestorer.command.set.url",
+          "value": true
+        },
         {
           "type": "permission",
           "key": "velocity.command.server",
@@ -917,10 +939,10 @@
       "groups": [
         "clan_kam",
         "clan_apathy",
-        "clan_demons"
+        "clan_eye"
       ]
     },
-    "staff": {
+    "roles": {
       "groups": [
         "role_admin",
         "role_moder",