Skip to content

Commit 763b15f

Browse files
committed
CI: run makepkg as non-root builder user
1 parent c0c57c0 commit 763b15f

1 file changed

Lines changed: 9 additions & 0 deletions

File tree

.github/workflows/arch-packages-ci.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,9 +20,17 @@ jobs:
2020
- name: Checkout
2121
uses: actions/checkout@v4
2222

23+
- name: Prepare non-root builder
24+
shell: bash
25+
run: |
26+
id -u builder >/dev/null 2>&1 || useradd -m builder
27+
chown -R builder:builder "$GITHUB_WORKSPACE"
28+
2329
- name: Validate PKGBUILDs
2430
shell: bash
2531
run: |
32+
set -euo pipefail
33+
su - builder -c "cd '$GITHUB_WORKSPACE' && bash -s" <<'EOF'
2634
set -euo pipefail
2735
mapfile -t pkgbuilds < <(find arch -type f -name PKGBUILD | sort)
2836
if [ ${#pkgbuilds[@]} -eq 0 ]; then
@@ -44,6 +52,7 @@ jobs:
4452
4553
popd >/dev/null
4654
done
55+
EOF
4756
4857
- name: Upload generated SRCINFO
4958
if: always()

0 commit comments

Comments
 (0)