babbarc/workspaces
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: remove viewer user

Browse Source
This commit is contained in:
yeti 2025-04-18 02:22:13 +01:00
parent 088db8fc58
commit f928ab5a0f
2 changed files with 3 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
build-workspace.sh
View File

@ -15,12 +15,9 @@ buildah run "$ctr" -- bash -c "\
pacman -Sy --noconfirm && pacman -S --noconfirm --needed base-devel neovim git zsh tmux \ pacman -Sy --noconfirm && pacman -S --noconfirm --needed base-devel neovim git zsh tmux \
nodejs python podman fzf fd ripgrep jdk-openjdk zsh-completions zsh-syntax-highlighting \ nodejs python podman fzf fd ripgrep jdk-openjdk zsh-completions zsh-syntax-highlighting \
lazygit zsh-autosuggestions luarocks python-pynvim npm bash-completion tree-sitter-cli \ lazygit zsh-autosuggestions luarocks python-pynvim npm bash-completion tree-sitter-cli \
pkgconf lua51 && pacman -Scc --noconfirm && \ lua51 && pacman -Scc --noconfirm && useradd -ms /bin/zsh $DEV_USER && \
groupadd secproc && useradd -ms /bin/zsh -G secproc $DEV_USER && \
useradd --system --no-create-home -s /usr/sbin/nologin -G $DEV_USER viewer && \
mkdir -p /tmp/tmux-shared && chown $DEV_USER:$DEV_USER /tmp/tmux-shared && \ mkdir -p /tmp/tmux-shared && chown $DEV_USER:$DEV_USER /tmp/tmux-shared && \
chmod 750 /tmp/tmux-shared && \ chmod 750 /tmp/tmux-shared && mkdir -p $SECURE && chmod -R 500 $SECURE && \
mkdir -p $SECURE && chmod -R 500 $SECURE && \
mkdir /app && chmod 700 /app && chown $DEV_USER:$DEV_USER /app mkdir /app && chmod 700 /app && chown $DEV_USER:$DEV_USER /app
" "
# copy start script # copy start script

3
ssh_router.sh
View File

@ -5,7 +5,6 @@ CONTAINER="$SSH_ORIGINAL_COMMAND"
IMAGE="analytics-backend-workspace" # change to match your setup IMAGE="analytics-backend-workspace" # change to match your setup
TMUX_SESSION="analytics-backend" TMUX_SESSION="analytics-backend"
DEV_USER="devuser" DEV_USER="devuser"
VIEW_USER="viewer"
TMUX_CMD=(tmux -S /tmp/tmux-shared/dev-socket) TMUX_CMD=(tmux -S /tmp/tmux-shared/dev-socket)
@ -77,7 +76,7 @@ rw)
;; ;;
ro) ro)
if (podman container exists "$CONTAINER" && podman inspect -f '{{.State.Running}}' "$CONTAINER" | grep -q true) >/dev/null 2>&1; then if (podman container exists "$CONTAINER" && podman inspect -f '{{.State.Running}}' "$CONTAINER" | grep -q true) >/dev/null 2>&1; then
if podman exec -it --user "$VIEW_USER" "$CONTAINER" "${TMUX_CMD[@]}" attach -r -t "$TMUX_SESSION"; then if podman exec -it --user "$DEV_USER" "$CONTAINER" "${TMUX_CMD[@]}" attach -r -t "$TMUX_SESSION"; then
log "❌ Could not attach to ${TMUX_CMD[*]} session. Please contact admin or try again later." log "❌ Could not attach to ${TMUX_CMD[*]} session. Please contact admin or try again later."
exit 1 exit 1
fi fi