feat(bash): run all commmand with non-root user

This commit is contained in:
Ahmad Husen
2021-05-30 13:52:20 +07:00
parent 3c654a34ce
commit ec0ee87e6a
2 changed files with 6 additions and 14 deletions
+1 -1
View File
@@ -2,7 +2,7 @@
FROM docker.io/library/archlinux:base-devel
# Install dependencies
RUN pacman -Syu --needed --noconfirm pacman-contrib namcap git rsync
RUN pacman -Syu --needed --noconfirm pacman-contrib namcap git
# Setup user
RUN useradd --create-home --shell /bin/bash builder && \
+5 -13
View File
@@ -1,18 +1,15 @@
#!/bin/bash
# Set path
echo '::group::Copying $WORKPATH to /tmp/gh-action'
WORKPATH=$GITHUB_WORKSPACE/$INPUT_PATH
# Set path permision
sudo -u builder cp -rfv $WORKPATH /tmp/gh-action
cd /tmp/gh-action
echo '::group::Changing directory to $PATH'
cd ./$INPUT_PATH
echo '::endgroup::'
# Update checksums
echo '::group::Updating checksums on PKGBUILD'
if [[ $INPUT_UPDPKGSUMS == true ]]; then
sudo -u builder updpkgsums
git diff PKGBUILD
sudo -u builder git diff PKGBUILD
fi
echo '::endgroup::'
@@ -20,14 +17,14 @@ echo '::endgroup::'
echo '::group::Generating new .SRCINFO based on PKGBUILD'
if [[ $INPUT_SRCINFO == true ]]; then
sudo -u builder makepkg --printsrcinfo > .SRCINFO
git diff .SRCINFO
sudo -u builder git diff .SRCINFO
fi
echo '::endgroup::'
# Validate with namcap
echo '::group::Validating PKGBUILD with namcap'
if [[ $INPUT_NAMCAP == true ]]; then
namcap -i PKGBUILD
sudo -u builder namcap -i PKGBUILD
fi
echo '::endgroup::'
@@ -37,8 +34,3 @@ if [[ -n "$INPUT_FLAGS" ]]; then
sudo -u builder makepkg $INPUT_FLAGS
fi
echo '::endgroup::'
echo '::group::Copying /tmp/gh-action to $WORKPATH'
rsync -avh --delete /tmp/gh-action/ $WORKPATH/
cd $WORKPATH
echo '::endgroup::'