feat(bash): run all commmand with non-root user

This commit is contained in:
Ahmad Husen
2021-05-30 13:52:20 +07:00
parent 3c654a34ce
commit ec0ee87e6a
2 changed files with 6 additions and 14 deletions
+1 -1
View File
@@ -2,7 +2,7 @@
FROM docker.io/library/archlinux:base-devel FROM docker.io/library/archlinux:base-devel
# Install dependencies # Install dependencies
RUN pacman -Syu --needed --noconfirm pacman-contrib namcap git rsync RUN pacman -Syu --needed --noconfirm pacman-contrib namcap git
# Setup user # Setup user
RUN useradd --create-home --shell /bin/bash builder && \ RUN useradd --create-home --shell /bin/bash builder && \
+5 -13
View File
@@ -1,18 +1,15 @@
#!/bin/bash #!/bin/bash
# Set path # Set path
echo '::group::Copying $WORKPATH to /tmp/gh-action' echo '::group::Changing directory to $PATH'
WORKPATH=$GITHUB_WORKSPACE/$INPUT_PATH cd ./$INPUT_PATH
# Set path permision
sudo -u builder cp -rfv $WORKPATH /tmp/gh-action
cd /tmp/gh-action
echo '::endgroup::' echo '::endgroup::'
# Update checksums # Update checksums
echo '::group::Updating checksums on PKGBUILD' echo '::group::Updating checksums on PKGBUILD'
if [[ $INPUT_UPDPKGSUMS == true ]]; then if [[ $INPUT_UPDPKGSUMS == true ]]; then
sudo -u builder updpkgsums sudo -u builder updpkgsums
git diff PKGBUILD sudo -u builder git diff PKGBUILD
fi fi
echo '::endgroup::' echo '::endgroup::'
@@ -20,14 +17,14 @@ echo '::endgroup::'
echo '::group::Generating new .SRCINFO based on PKGBUILD' echo '::group::Generating new .SRCINFO based on PKGBUILD'
if [[ $INPUT_SRCINFO == true ]]; then if [[ $INPUT_SRCINFO == true ]]; then
sudo -u builder makepkg --printsrcinfo > .SRCINFO sudo -u builder makepkg --printsrcinfo > .SRCINFO
git diff .SRCINFO sudo -u builder git diff .SRCINFO
fi fi
echo '::endgroup::' echo '::endgroup::'
# Validate with namcap # Validate with namcap
echo '::group::Validating PKGBUILD with namcap' echo '::group::Validating PKGBUILD with namcap'
if [[ $INPUT_NAMCAP == true ]]; then if [[ $INPUT_NAMCAP == true ]]; then
namcap -i PKGBUILD sudo -u builder namcap -i PKGBUILD
fi fi
echo '::endgroup::' echo '::endgroup::'
@@ -37,8 +34,3 @@ if [[ -n "$INPUT_FLAGS" ]]; then
sudo -u builder makepkg $INPUT_FLAGS sudo -u builder makepkg $INPUT_FLAGS
fi fi
echo '::endgroup::' echo '::endgroup::'
echo '::group::Copying /tmp/gh-action to $WORKPATH'
rsync -avh --delete /tmp/gh-action/ $WORKPATH/
cd $WORKPATH
echo '::endgroup::'