Avoid config permissions change https://github.com/alexbelgium/hassio-addons/pull/413

2026-01-11 18:31:02 +01:00 · 2022-08-03 21:20:26 +02:00
parent d39de59837
commit 0987d7de4c
31 changed files with 181 additions and 27 deletions
--- a/bazarr/Dockerfile
+++ b/bazarr/Dockerfile
@@ -33,8 +33,13 @@ RUN \
    grep -rl " /config" /etc/cont-init.d | xargs sed -i 's| /config| /config/addons_config/bazarr|g' \
    && grep -rl " /config" /etc/services.d | xargs sed -i 's| /config| /config/addons_config/bazarr|g' \
    \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/booksonic_air/Dockerfile
+++ b/booksonic_air/Dockerfile
@@ -29,8 +29,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \

 ENV BOOKSONIC_AIR_SETTINGS="/data"
 RUN \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/calibre/Dockerfile
+++ b/calibre/Dockerfile
@@ -30,6 +30,11 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \

 # Allow UID and GID setting
 RUN if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/calibre_web/Dockerfile
+++ b/calibre_web/Dockerfile
@@ -28,8 +28,12 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
    S6_CMD_WAIT_FOR_SERVICES_MAXTIME=0 \
    S6_SERVICES_GRACETIME=0

-# Allow UID and GID setting
 RUN if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/code-server/Dockerfile
+++ b/code-server/Dockerfile
@@ -28,8 +28,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
    S6_SERVICES_GRACETIME=0

 RUN \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/flexget/Dockerfile
+++ b/flexget/Dockerfile
@@ -31,8 +31,13 @@ SHELL ["/bin/bash", "-o", "pipefail", "-c"]

 # hadolint ignore=SC2016
 RUN \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/grav/Dockerfile
+++ b/grav/Dockerfile
@@ -32,8 +32,13 @@ RUN \
    sed -i "s|/config|/share/grav|g" /etc/cont-init.d/50-config \
    && sed -i "s|/share/grav/nginx|/config/nginx|g" /etc/cont-init.d/50-config \
    \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/jackett/Dockerfile
+++ b/jackett/Dockerfile
@@ -30,8 +30,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 # use /data instead of /config for hass.io environment
 RUN sed -i "s|/config|/config/addons_config/Jackett|g" /etc/cont-init.d/30-config \
    \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/jellyfin/Dockerfile
+++ b/jellyfin/Dockerfile
@@ -31,6 +31,11 @@ ENV S6_CMD_WAIT_FOR_SERVICES=0 \
 # Allow UID and GID setting
 RUN \
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/lidarr/Dockerfile
+++ b/lidarr/Dockerfile
@@ -32,8 +32,13 @@ RUN \
    sed -i "s|/config|/config/addons_config/lidarr|g" /etc/services.d/lidarr/run \
    && sed -i "s|/config|/config/addons_config/lidarr|g" /etc/cont-init.d/30-config \
    \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/mylar3/Dockerfile
+++ b/mylar3/Dockerfile
@@ -30,8 +30,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 RUN sed -i "s|/config|/data|g" /etc/services.d/*/run \
    && sed -i "s|/config|/data|g" /etc/cont-init.d/* \
    \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/nzbget/Dockerfile
+++ b/nzbget/Dockerfile
@@ -30,8 +30,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 RUN sed -i "s|/config|/config/addons_config/nzbget|g" /etc/services.d/nzbget/run \
    && sed -i "s|/config|/config/addons_config/nzbget|g" /etc/cont-init.d/30-config \
    && sed -i "s|/config|/config/addons_config/nzbget|g" /etc/cont-init.d/10-adduser \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/ombi/Dockerfile
+++ b/ombi/Dockerfile
@@ -30,8 +30,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 # spellcheck disable=SC2015
 # hadolint ignore=SC2015,DL4006
 RUN \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/organizr/Dockerfile
+++ b/organizr/Dockerfile
@@ -31,8 +31,13 @@ RUN \
    ########################################
    # Correct upstream image folders links #
    ########################################
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/overseerr/Dockerfile
+++ b/overseerr/Dockerfile
@@ -31,8 +31,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 RUN sed -i "s|/config|/config/addons_config/addons_config/overseerr|g" /etc/services.d/overseerr/run \
    && sed -i "s|/config|/config/addons_config/addons_config/overseerr|g" /etc/cont-init.d/30-config \
    \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/paperless_ngx/Dockerfile
+++ b/paperless_ngx/Dockerfile
@@ -34,8 +34,13 @@ RUN \
    #################
    # Correct image #
    #################
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/papermerge/Dockerfile
+++ b/papermerge/Dockerfile
@@ -29,8 +29,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \

 # hadolint ignore=SC2015
 RUN \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/piwigo/Dockerfile
+++ b/piwigo/Dockerfile
@@ -28,8 +28,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
    S6_SERVICES_GRACETIME=0

 RUN \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/plex/Dockerfile
+++ b/plex/Dockerfile
@@ -37,6 +37,11 @@ RUN \
    #############################
    \
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/plex_meta_manager/Dockerfile
+++ b/plex_meta_manager/Dockerfile
@@ -34,8 +34,13 @@ RUN \
    sed -i "s|/config|/config/addons_config/plex-meta-manager|g" /etc/services.d/*/run \
    && sed -i "s|/config|/config/addons_config/plex-meta-manager|g" /etc/cont-init.d/* \
    \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/prowlarr/Dockerfile
+++ b/prowlarr/Dockerfile
@@ -28,8 +28,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
    S6_SERVICES_GRACETIME=0

 RUN \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/qbittorrent/Dockerfile
+++ b/qbittorrent/Dockerfile
@@ -39,8 +39,13 @@ ENV \

 # hadolint ignore=SC2015
 RUN \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/radarr/Dockerfile
+++ b/radarr/Dockerfile
@@ -32,8 +32,13 @@ RUN \
    sed -i "s|/config|/config/addons_config/radarr|g" /etc/services.d/radarr/run \
    && sed -i "s|/config|/config/addons_config/radarr|g" /etc/cont-init.d/30-config \
    \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/readarr/Dockerfile
+++ b/readarr/Dockerfile
@@ -31,8 +31,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 RUN sed -i "s|/config|/config/addons_config/radarr/readarr|g" /etc/services.d/readarr/run \
    && sed -i "s|/config|/config/addons_config/radarr/readarr|g" /etc/cont-init.d/30-config \
    \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/requestrr/Dockerfile
+++ b/requestrr/Dockerfile
@@ -31,8 +31,13 @@ RUN \
    # use /data instead of /config for hass.io environment
    sed -i 's|/config \\|/data \\|g' /etc/cont-init.d/30-config \
    \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/resiliosync/Dockerfile
+++ b/resiliosync/Dockerfile
@@ -33,8 +33,13 @@ RUN \
    ###############
    # Adapt image #
    ###############
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/scrutiny/Dockerfile
+++ b/scrutiny/Dockerfile
@@ -31,8 +31,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \

 # hadolint ignore=DL4006
 RUN \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/scrutiny_fa/Dockerfile
+++ b/scrutiny_fa/Dockerfile
@@ -30,8 +30,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \

 # hadolint ignore=DL4006
 RUN \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \
--- a/sonarr/Dockerfile
+++ b/sonarr/Dockerfile
@@ -33,8 +33,13 @@ RUN \
    sed -i "s|/config|/config/addons_config/sonarr|g" /etc/services.d/sonarr/run \
    && sed -i "s|/config|/config/addons_config/sonarr|g" /etc/cont-init.d/30-config \
    \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/transmission/Dockerfile
+++ b/transmission/Dockerfile
@@ -30,8 +30,13 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 # MOFIFY DATA PATH
 RUN sed -i "s|config|config/transmission|g" /etc/services.d/transmission/run \
    #&& sed -i "s|config|config/transmission|g" /etc/cont-init.d/20-config \
-    # Allow UID and GID setting
+    # Avoid custom-init.d duplications
    && if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser
--- a/webtop_kde/Dockerfile
+++ b/webtop_kde/Dockerfile
@@ -29,6 +29,11 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \

 # Allow UID and GID setting
 RUN if [ -f /etc/cont-init.d/02-tamper-check ]; then rm /etc/cont-init.d/02-tamper-check; fi \
+    \
+    # Prevent changing ownership of /config
+    && if [ -f /etc/cont-init.d/10-adduser ]; then sed -i "/chown abc:abc \/config$/d" /etc/cont-init.d/10-adduser; fi \
+    \
+    # Allow UID and GID setting
    && sed -i 's/bash/bashio/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PUID:-911}/(bashio::config "PUID")/g' /etc/cont-init.d/10-adduser \
    && sed -i 's/{PGID:-911}/(bashio::config "PGID")/g' /etc/cont-init.d/10-adduser \