[projects/cleanbuild] docker: move sudoers as a file

glen glen at pld-linux.org
Mon Dec 31 01:02:44 CET 2018


commit 1deb546f080ba942a0b217e94dd115856d1e5238
Author: Elan Ruusamäe <glen at pld-linux.org>
Date:   Mon Dec 31 01:40:06 2018 +0200

    docker: move sudoers as a file

 docker/Dockerfile | 4 +---
 docker/sudoers    | 5 +++++
 2 files changed, 6 insertions(+), 3 deletions(-)
---
diff --git a/docker/Dockerfile b/docker/Dockerfile
index e78d4b8..0518b64 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -8,6 +8,7 @@ WORKDIR /dist
 COPY rpmmacros ./home/builder/.rpmmacros
 # overwrite with our config (it defines same path, but disabled)
 COPY localrpms.conf ./etc/poldek/source.conf
+COPY sudoers ./etc/sudoers.d/builder
 
 # use sane permissions until solved upstream
 # https://gitlab.com/gitlab-org/gitlab-runner/issues/1736
@@ -21,9 +22,6 @@ RUN set -x \
 	&& poldek -u rpm-build perl-modules pwdutils coreutils util-linux git-core gawk sudo ccache-wrapper \
 	# this will setup builder user
 	&& poldek -u pld-builder-chroot \
-	# for builder -R
-	&& echo 'builder ALL = NOPASSWD:/usr/bin/poldek -q --update --upa' > /etc/sudoers.d/builder \
-	&& echo 'builder ALL = NOPASSWD:/usr/bin/poldek --noask --caplookup --uniq -uG *' >>  /etc/sudoers.d/builder \
 	# configures empty dir
 	&& rm /etc/poldek/repos.d/pld-builder.conf \
 	# preserve downloaded packages
diff --git a/docker/sudoers b/docker/sudoers
new file mode 100644
index 0000000..1b16e3b
--- /dev/null
+++ b/docker/sudoers
@@ -0,0 +1,5 @@
+# for builder -R
+builder ALL = NOPASSWD:/usr/bin/poldek -q --update --upa
+builder ALL = NOPASSWD:/usr/bin/poldek --noask --caplookup --uniq -uG *
+
+# vim:ft=sudoers
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/projects/cleanbuild.git/commitdiff/8793c6127466e4784aaab5ba669818f454d90318



More information about the pld-cvs-commit mailing list