#!/bin/sh

set -e

# Mitigation for Risk 2: Stale UNIX Socket on Unclean Shutdown
rm -f /var/run/spire/agent.sock

mkdir -p /opt/spire/data/agent
mkdir -p /var/run/spire

if [ ! -f /opt/spire/agent.conf ]; then
  echo "Writing default SPIRE agent.conf..."
  cp /etc/spire/templates/agent.conf /opt/spire/agent.conf
  chmod 644 /opt/spire/agent.conf
fi

exec /usr/local/bin/spire-agent "$@"