docker-entrypoint.sh

#!/bin/bash
set -e -o pipefail

### Container entrypoint
# Runs the CMD as defined by the Dockerfile or passed to `docker run`
# Can be used to configure the runtime dir
# Bypass by using ENTRYPOINT or `--entrypoint`

### Set INVOKEAI_ROOT pointing to a valid runtime directory
# Otherwise configure the runtime dir first.

### Set the CONTAINER_UID envvar to match your user.
# Ensures files created in the container are owned by you:
#   docker run --rm -it -v /some/path:/invokeai -e CONTAINER_UID=$(id -u) <this image>
# Default UID: 1000 chosen due to popularity on Linux systems. Possibly 501 on MacOS.

USER_ID=${CONTAINER_UID:-1000}
USER=ubuntu
# if the user does not exist, create it. It is expected to be present on ubuntu >=24.x
_=$(id ${USER} 2>&1) || useradd -u ${USER_ID} ${USER}
# ensure the UID is correct
usermod -u ${USER_ID} ${USER} || true 1>/dev/null
mkdir -p /home/${USER}
chown ${USER} /home/${USER}

# Add ${USER} in render group when required
if [ -f /dev/kfd ]
then
	RENDER_GID=$(stat -c %g /dev/kfd)
	_=$(getent group ${RENDER_GID} 2>&1) || groupadd -g ${RENDER_GID} render
	usermod -a -G $RENDER_GID $USER
fi

# Add ${USER} in video group when required
if [ -f /dev/dri/card0 ]
then
	VIDEO_GID=$(stat -c %g /dev/dri/card0)
	_=$(getent group ${VIDEO_GID} 2>&1) || groupadd ${VIDEO_GID} video
	usermod -a -G $VIDEO_GID $USER
fi

### Set the $PUBLIC_KEY env var to enable SSH access.
# We do not install openssh-server in the image by default to avoid bloat.
# but it is useful to have the full SSH server e.g. on Runpod.
# (use SCP to copy files to/from the image, etc)
if [[ -v "PUBLIC_KEY" ]] && [[ ! -d "${HOME}/.ssh" ]]; then
  apt-get update
  apt-get install -y openssh-server
  pushd "$HOME"
  mkdir -p .ssh
  echo "${PUBLIC_KEY}" >.ssh/authorized_keys
  chmod -R 700 .ssh
  popd
  service ssh start
fi

mkdir -p "${INVOKEAI_ROOT}"
chown --recursive ${USER} "${INVOKEAI_ROOT}" || true
cd "${INVOKEAI_ROOT}"
export HF_HOME=${HF_HOME:-$INVOKEAI_ROOT/.cache/huggingface}
export MPLCONFIGDIR=${MPLCONFIGDIR:-$INVOKEAI_ROOT/.matplotlib}

# Run the CMD as the Container User (not root).
exec gosu ${USER} "$@"