feat(bash): run all commmand with non-root user
This commit is contained in:
+1
-1
@@ -2,7 +2,7 @@
|
|||||||
FROM docker.io/library/archlinux:base-devel
|
FROM docker.io/library/archlinux:base-devel
|
||||||
|
|
||||||
# Install dependencies
|
# Install dependencies
|
||||||
RUN pacman -Syu --needed --noconfirm pacman-contrib namcap git rsync
|
RUN pacman -Syu --needed --noconfirm pacman-contrib namcap git
|
||||||
|
|
||||||
# Setup user
|
# Setup user
|
||||||
RUN useradd --create-home --shell /bin/bash builder && \
|
RUN useradd --create-home --shell /bin/bash builder && \
|
||||||
|
|||||||
+5
-13
@@ -1,18 +1,15 @@
|
|||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
|
||||||
# Set path
|
# Set path
|
||||||
echo '::group::Copying $WORKPATH to /tmp/gh-action'
|
echo '::group::Changing directory to $PATH'
|
||||||
WORKPATH=$GITHUB_WORKSPACE/$INPUT_PATH
|
cd ./$INPUT_PATH
|
||||||
# Set path permision
|
|
||||||
sudo -u builder cp -rfv $WORKPATH /tmp/gh-action
|
|
||||||
cd /tmp/gh-action
|
|
||||||
echo '::endgroup::'
|
echo '::endgroup::'
|
||||||
|
|
||||||
# Update checksums
|
# Update checksums
|
||||||
echo '::group::Updating checksums on PKGBUILD'
|
echo '::group::Updating checksums on PKGBUILD'
|
||||||
if [[ $INPUT_UPDPKGSUMS == true ]]; then
|
if [[ $INPUT_UPDPKGSUMS == true ]]; then
|
||||||
sudo -u builder updpkgsums
|
sudo -u builder updpkgsums
|
||||||
git diff PKGBUILD
|
sudo -u builder git diff PKGBUILD
|
||||||
fi
|
fi
|
||||||
echo '::endgroup::'
|
echo '::endgroup::'
|
||||||
|
|
||||||
@@ -20,14 +17,14 @@ echo '::endgroup::'
|
|||||||
echo '::group::Generating new .SRCINFO based on PKGBUILD'
|
echo '::group::Generating new .SRCINFO based on PKGBUILD'
|
||||||
if [[ $INPUT_SRCINFO == true ]]; then
|
if [[ $INPUT_SRCINFO == true ]]; then
|
||||||
sudo -u builder makepkg --printsrcinfo > .SRCINFO
|
sudo -u builder makepkg --printsrcinfo > .SRCINFO
|
||||||
git diff .SRCINFO
|
sudo -u builder git diff .SRCINFO
|
||||||
fi
|
fi
|
||||||
echo '::endgroup::'
|
echo '::endgroup::'
|
||||||
|
|
||||||
# Validate with namcap
|
# Validate with namcap
|
||||||
echo '::group::Validating PKGBUILD with namcap'
|
echo '::group::Validating PKGBUILD with namcap'
|
||||||
if [[ $INPUT_NAMCAP == true ]]; then
|
if [[ $INPUT_NAMCAP == true ]]; then
|
||||||
namcap -i PKGBUILD
|
sudo -u builder namcap -i PKGBUILD
|
||||||
fi
|
fi
|
||||||
echo '::endgroup::'
|
echo '::endgroup::'
|
||||||
|
|
||||||
@@ -37,8 +34,3 @@ if [[ -n "$INPUT_FLAGS" ]]; then
|
|||||||
sudo -u builder makepkg $INPUT_FLAGS
|
sudo -u builder makepkg $INPUT_FLAGS
|
||||||
fi
|
fi
|
||||||
echo '::endgroup::'
|
echo '::endgroup::'
|
||||||
|
|
||||||
echo '::group::Copying /tmp/gh-action to $WORKPATH'
|
|
||||||
rsync -avh --delete /tmp/gh-action/ $WORKPATH/
|
|
||||||
cd $WORKPATH
|
|
||||||
echo '::endgroup::'
|
|
||||||
|
|||||||
Reference in New Issue
Block a user