#!/bin/bash
set -eu

echo "[entrypoint] pid=$$ uid=$(id -u) gid=$(id -g)"
echo "[entrypoint] /work/data BEFORE chown:"
ls -ldn /work/data 2>&1 || true
ls -la  /work/data 2>&1 | head -50 || true

mkdir -p /work/data
chown -R 1001:1001 /work/data 2>&1 || {
  rc=$?
  echo "[entrypoint] WARNING chown /work/data rc=$rc (continuamos; la app puede fallar)"
}

echo "[entrypoint] /work/data AFTER chown:"
ls -ldn /work/data 2>&1 || true

# Tambien asegura que el binario sea del app user (por si la imagen viene con owner root)
chown -R 1001:1001 /work 2>&1 || true
chmod 0755 /work /work/application 2>&1 || true

echo "[entrypoint] dropping to UID 1001 via setpriv"
exec setpriv --reuid=1001 --regid=1001 --init-groups -- /work/application "$@"