There's also sleep infinity as an option.

You could switch the script back to a run.sh name and just include sleep infinity in there. Then you wouldn't need to shell out at the docker level.

I couldn't get either the docker-compose or the docker run method to work with the overriden CMD. I don't see systemd logs. We probably also need to run whatever the default for jrei/systemd-debian:12 is, or a crazy idea, include firewall-rules.sh as a systemd oneshot and leverage the fact that we're running systemd in a container.

The command is normally CMD ["/lib/systemd/systemd"] according to https://hub.docker.com/layers/jrei/systemd-debian/latest/images/sha256-1288ff231f93ba73984799d5881af10b50b1e4a4244bc9007560a1aa70d07fbf?context=explore

What works for me and is probably the easiest for right now is:

CMD [ "/bin/bash", "-c", "/home/firewall-rules.sh && /lib/systemd/systemd" ]

What works for me and is probably the easiest for right now is:

CMD [ "/bin/bash", "-c", "/home/firewall-rules.sh && /lib/systemd/systemd" ]

Also confirm the above works. This seems to be a generally accepted method in common use.

thanks for helping on this one!
the new commit uses the generally used workaround.

You betcha! Resolves #11