Fix: Explicitly set the HOME environment variable for running as root at startup (#9643)

* Explicitly set the HOME environment for the migrations to fix issue with certificates

* Defines the HOME globally when we're running as root for startup

docker/rootfs/etc/s6-overlay/s6-rc.d/init-migrations/migrate.sh

@@ -1,7 +0,0 @@
-#!/command/with-contenv /usr/bin/bash
-# shellcheck shell=bash
-declare -r data_dir="${PAPERLESS_DATA_DIR:-/usr/src/paperless/data}"
-
-# shellcheck disable=SC2164
-cd "${PAPERLESS_SRC_DIR}"
-exec s6-setlock -n "${data_dir}/migration_lock" python3 manage.py migrate --skip-checks --no-input

docker/rootfs/etc/s6-overlay/s6-rc.d/init-migrations/run

@@ -2,11 +2,17 @@
 # shellcheck shell=bash
 declare -r log_prefix="[init-migrations]"
 
+declare -r data_dir="${PAPERLESS_DATA_DIR:-/usr/src/paperless/data}"
+
 echo "${log_prefix} Apply database migrations..."
 
+cd "${PAPERLESS_SRC_DIR}"
+
 # The whole migrate, with flock, needs to run as the right user
 if [[ -n "${USER_IS_NON_ROOT}" ]]; then
-	exec /etc/s6-overlay/s6-rc.d/init-migrations/migrate.sh
+	exec s6-setlock -n "${data_dir}/migration_lock" python3 manage.py migrate --skip-checks --no-input
 else
-	exec s6-setuidgid paperless /etc/s6-overlay/s6-rc.d/init-migrations/migrate.sh
+	exec s6-setuidgid paperless \
+		s6-setlock -n "${data_dir}/migration_lock" \
+		python3 manage.py migrate --skip-checks --no-input
 fi

docker/rootfs/etc/s6-overlay/s6-rc.d/init-start/run

@@ -15,5 +15,6 @@ if [ $(id -u) == $(id -u paperless) ]; then
 	printf "true" > /var/run/s6/container_environment/USER_IS_NON_ROOT
 	echo "${log_prefix}  paperless-ngx docker container running under a user"
 else
+	printf "/usr/src/paperless" > /var/run/s6/container_environment/HOME
 	echo "${log_prefix}  paperless-ngx docker container starting init as root"
 fi