From 19181567d453a7e804cff6a3be68b7cfa0b19560 Mon Sep 17 00:00:00 2001
From: yutuknown <162727580+yutuknown@users.noreply.github.com>
Date: Thu, 6 Aug 2026 06:12:10 +0530
Subject: [PATCH] fix(docker): move entrypoint script to /app to avoid tmpfs
 masking (#8999)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Validated in local merge-train (devbox-vm-06-dev002) @ combined-tip (FAST gates green: static + changed tests + vitest — only pre-existing audit.test.ts flake). Evidence: /home/diegosouzapw/dev/proxys/OmniRoute/.claude/worktrees/merge-train-20260805-213228-suite.log
---
 Dockerfile                    | 4 ++--
 scripts/build/runtime-env.mjs | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 1924fcef5a..47780263c6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -179,8 +179,8 @@ EXPOSE 20128
 USER node
 
 # Warns if the mounted data volume has wrong ownership
-COPY --chmod=755 scripts/check-permissions.sh /tmp/check-permissions.sh
-ENTRYPOINT ["/tmp/check-permissions.sh"]
+COPY --chmod=755 scripts/check-permissions.sh /app/check-permissions.sh
+ENTRYPOINT ["/app/check-permissions.sh"]
 
 HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
   CMD ["node", "healthcheck.mjs"]
diff --git a/scripts/build/runtime-env.mjs b/scripts/build/runtime-env.mjs
index ea91bf9190..fb519773f0 100644
--- a/scripts/build/runtime-env.mjs
+++ b/scripts/build/runtime-env.mjs
@@ -107,6 +107,7 @@ export function withRuntimePortEnv(env, runtimePorts) {
     PORT: String(dashboardPort),
     DASHBOARD_PORT: String(dashboardPort),
     API_PORT: String(apiPort),
+    HOSTNAME: env.OMNIROUTE_HOSTNAME || "0.0.0.0",
   };
 }