git-echo/linux_patch_api
Private
Public Access
1
0
Fork 0
Code Releases 32 Wiki Activity

Fix: Use non-root builduser for makepkg in CI container

Browse Source
This commit is contained in:
Echo
2026-04-13 18:02:04 +00:00
parent 0a98207edc
commit 2dbd6ee165
1 changed files with 13 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
build-arch.sh
View File

@ -43,7 +43,7 @@ pkgname=linux-patch-api
pkgver=1.0.0 pkgver=1.0.0
pkgrel=1 pkgrel=1
pkgdesc="Secure remote package management API for Linux systems" pkgdesc="Secure remote package management API for Linux systems"
url="https://gitea.internal/linux-patch-api" url="https://gitea.moon-dragon.us/echo/linux_patch_api"
arch=('x86_64') arch=('x86_64')
license=('MIT') license=('MIT')
depends=('systemd') depends=('systemd')
@ -56,11 +56,21 @@ EOF
# Create .SRCINFO # Create .SRCINFO
echo "Creating .SRCINFO..." echo "Creating .SRCINFO..."
makepkg --printsrcinfo --allow-root > .SRCINFO
# Build package # Build package
echo "Building Arch package..." echo "Building Arch package..."
makepkg -f --noconfirm --allow-root
# For CI/container environments where we run as root, create a build user
if [ "$(id -u)" = "0" ]; then
echo "Running as root - creating build user for makepkg..."
useradd -m builduser 2>/dev/null || true
chown -R builduser:builduser "$(pwd)"
su - builduser -c "cd $(pwd) && makepkg --printsrcinfo > .SRCINFO"
su - builduser -c "cd $(pwd) && makepkg -f --noconfirm"
else
makepkg --printsrcinfo > .SRCINFO
makepkg -f --noconfirm
fi
# Copy to releases directory # Copy to releases directory
echo "" echo ""