fix(iso): escape $svc in mask-loop heredoc (was expanding to empty)

Previous build's STEP 47/50 log showed:
  RUN for svc in nostr-vpn archipelago-wg archipelago-wg-address; do
    rm -f /etc/systemd/system/.service
    ln -sf /dev/null /etc/systemd/system/.service
  done

The Dockerfile is generated via <<DOCKERFILE heredoc in the build
script, so unescaped $svc resolved in the outer bash BEFORE Docker
ever saw it, leaving nostr-vpn/wg masks as a hidden `.service` file
with no effect. nostr-vpn still tries to start on boot → [FAILED].

Fixed with \$svc so the literal lands in the Dockerfile for Docker's
shell to expand per iteration.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Dorian 2026-04-19 10:37:00 -04:00
parent da3012b75a
commit 036db76773

View File

@ -474,8 +474,8 @@ RUN systemctl mask archipelago-fips.service || true
# removes the symlink and drops in a configured service when env
# files are in place.
RUN for svc in nostr-vpn archipelago-wg archipelago-wg-address; do \\
rm -f /etc/systemd/system/$svc.service; \\
ln -sf /dev/null /etc/systemd/system/$svc.service; \\
rm -f /etc/systemd/system/\$svc.service; \\
ln -sf /dev/null /etc/systemd/system/\$svc.service; \\
done
# Remove policy-rc.d so services can start on first boot