move mounted code to fix /tmp file permissions (#6354)

build/Dockerfile

@@ -538,7 +538,7 @@ ARG NAP_MODULES=none
 
 ENV BUILD_OS=${BUILD_OS}
 
-RUN --mount=type=bind,target=/tmp \
+RUN --mount=type=bind,target=/code \
  --mount=type=bind,from=nginx-files,src=common.sh,target=/usr/local/bin/common.sh \
  --mount=type=bind,from=nginx-files,src=patch-os.sh,target=/usr/local/bin/patch-os.sh \
  patch-os.sh \

build/scripts/common.sh

@@ -5,20 +5,20 @@ set -e
 PLUS=""
 if [ -z "${BUILD_OS##*plus*}" ]; then
  mkdir -p /etc/nginx/oidc/
- cp -a /tmp/internal/configs/oidc/* /etc/nginx/oidc/
+ cp -a /code/internal/configs/oidc/* /etc/nginx/oidc/
  mkdir -p /etc/nginx/state_files/
  PLUS=-plus
 fi
 
-mkdir -p /etc/nginx/njs/ && cp -a /tmp/internal/configs/njs/* /etc/nginx/njs/
+mkdir -p /etc/nginx/njs/ && cp -a /code/internal/configs/njs/* /etc/nginx/njs/
 mkdir -p /var/lib/nginx /etc/nginx/secrets /etc/nginx/stream-conf.d
 setcap 'cap_net_bind_service=+eip' /usr/sbin/nginx 'cap_net_bind_service=+eip' /usr/sbin/nginx-debug
 setcap -v 'cap_net_bind_service=+eip' /usr/sbin/nginx 'cap_net_bind_service=+eip' /usr/sbin/nginx-debug
 
-cp -a /tmp/internal/configs/version1/nginx$PLUS.ingress.tmpl \
- /tmp/internal/configs/version1/nginx$PLUS.tmpl \
- /tmp/internal/configs/version2/nginx$PLUS.virtualserver.tmpl \
- /tmp/internal/configs/version2/nginx$PLUS.transportserver.tmpl \
+cp -a /code/internal/configs/version1/nginx$PLUS.ingress.tmpl \
+ /code/internal/configs/version1/nginx$PLUS.tmpl \
+ /code/internal/configs/version2/nginx$PLUS.virtualserver.tmpl \
+ /code/internal/configs/version2/nginx$PLUS.transportserver.tmpl \
  /
 
 chown -R 101:0 /etc/nginx /var/cache/nginx /var/lib/nginx /var/log/nginx /*.tmpl