2 Commits

Author SHA1 Message Date
6ec95e4bd9 ci: add bindfs install
Some checks failed
Create Release / changelog (push) Failing after 2m5s
2025-05-30 19:50:59 +03:00
578da7ff52 Revert "fix: use mount only for non-root users"
This reverts commit c51caf5c52.
2025-05-30 19:50:38 +03:00
2 changed files with 19 additions and 28 deletions

View File

@@ -49,7 +49,7 @@ jobs:
- name: Prepare for install
run: |
apt-get update && apt-get install -y libcap2-bin
apt-get update && apt-get install -y libcap2-bin bindfs
- name: Build alr
env:

View File

@@ -64,26 +64,21 @@ func BuildCmd() *cli.Command {
},
},
Action: func(c *cli.Context) error {
var err error
var wd string
if utils.IsNotRoot() {
if err := utils.EnuseIsPrivilegedGroupMember(); err != nil {
return err
}
wd, err = os.Getwd()
if err != nil {
return cliutils.FormatCliExit(gotext.Get("Error getting working directory"), err)
}
var wdCleanup func()
wd, wdCleanup, err = Mount(wd)
if err != nil {
return err
}
defer wdCleanup()
if err := utils.EnuseIsPrivilegedGroupMember(); err != nil {
return err
}
wd, err := os.Getwd()
if err != nil {
return cliutils.FormatCliExit(gotext.Get("Error getting working directory"), err)
}
wd, wdCleanup, err := Mount(wd)
if err != nil {
return err
}
defer wdCleanup()
ctx := c.Context
deps, err := appbuilder.
@@ -172,16 +167,12 @@ func BuildCmd() *cli.Command {
if scriptArgs != nil {
scriptFile := filepath.Base(scriptArgs.Script)
scriptDir := filepath.Dir(scriptArgs.Script)
if utils.IsNotRoot() {
var scriptDirCleanup func()
scriptDir, scriptDirCleanup, err = Mount(scriptDir)
if err != nil {
return err
}
defer scriptDirCleanup()
newScriptDir, scriptDirCleanup, err := Mount(filepath.Dir(scriptArgs.Script))
if err != nil {
return err
}
scriptArgs.Script = filepath.Join(scriptDir, scriptFile)
defer scriptDirCleanup()
scriptArgs.Script = filepath.Join(newScriptDir, scriptFile)
}
if err := utils.ExitIfCantDropCapsToAlrUser(); err != nil {