babbarc/workspaces
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(buildah): add devuser uid & gid to match host system for correct permissions

Browse Source
This commit is contained in:
yeti 2025-04-25 07:11:32 +01:00
parent f370f68dbd
commit 32c979cde4
1 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
build-workspace.sh
View File

@ -1,11 +1,11 @@
#!/bin/bash #!/bin/bash
# build-persistent-devbox.sh
# Persistent Fedora Minimal-based devbox with SSH, Git, and GitOps secrets (immutable config files)
set -euo pipefail set -euo pipefail
IMG_NAME="analytics-backend-workspace" IMG_NAME="analytics-backend-workspace"
DEV_USER=devuser DEV_USER=devuser
DEV_UID=1001
DEV_GID=1001
SECURE=/opt/secure SECURE=/opt/secure
DEV_HOME=/home/$DEV_USER DEV_HOME=/home/$DEV_USER
@ -15,10 +15,8 @@ buildah run "$ctr" -- bash -c "\
pacman -Sy --noconfirm && pacman -S --noconfirm --needed base-devel neovim git zsh tmux \ pacman -Sy --noconfirm && pacman -S --noconfirm --needed base-devel neovim git zsh tmux \
nodejs python podman fzf fd ripgrep jdk-openjdk zsh-completions zsh-syntax-highlighting \ nodejs python podman fzf fd ripgrep jdk-openjdk zsh-completions zsh-syntax-highlighting \
lazygit zsh-autosuggestions luarocks python-pynvim npm bash-completion tree-sitter-cli \ lazygit zsh-autosuggestions luarocks python-pynvim npm bash-completion tree-sitter-cli \
lua51 && pacman -Scc --noconfirm && \ lua51 && pacman -Scc --noconfirm && groupadd secproc && groupadd -g $DEV_GID $DEV_USER && \
groupadd secproc && useradd -ms /bin/zsh -G secproc $DEV_USER && \ useradd -ms /bin/zsh -G secproc -u $DEV_UID -g $DEV_GID $DEV_USER && mkdir -m 500 -p $SECURE
mkdir -p $SECURE && chmod -R 500 $SECURE && \
mkdir /app && chmod 700 /app && chown $DEV_USER:$DEV_USER /app
" "
# copy start script, zshrc, neovim, tmux setup and ssh setup # copy start script, zshrc, neovim, tmux setup and ssh setup