diff --git a/src/renovate.ts b/src/renovate.ts index 13c347d3..116c63cc 100644 --- a/src/renovate.ts +++ b/src/renovate.ts @@ -20,7 +20,9 @@ class Renovate { } async runDockerContainer(): Promise { - const group = await this.getDockerGroup(); + const renovateDockerUser = 'ubuntu'; + const githubActionsDockerGroup = 'docker'; + const commandArguments = [ '--rm', `--env ${this.configFileEnv}=${this.configFileMountPath()}`, @@ -28,7 +30,7 @@ class Renovate { `--volume ${this.configFile}:${this.configFileMountPath()}`, `--volume /var/run/docker.sock:/var/run/docker.sock`, `--volume /tmp:/tmp`, - `--user 1000:${group}`, + `--user ${renovateDockerUser}:${githubActionsDockerGroup}`, this.docker.image(), ]; const command = `docker run ${commandArguments.join(' ')}`; @@ -39,18 +41,6 @@ class Renovate { } } - /** - * Fetch the host docker group on github. - * Container user needs this to access the docker socket. - */ - private async getDockerGroup(): Promise { - const groups = await fs.promises.readFile('/etc/group', { - encoding: 'utf-8', - }); - const [, group] = /^docker:x:([1-9][0-9]*):$/m.exec(groups); - return group; - } - private validateArguments(): void { if (!fs.existsSync(this.configFile)) { throw new Error(