actions/renovatebot-github
1
0
Fork 0
mirror of https://github.com/renovatebot/github-action.git synced 2025-12-16 17:02:36 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

chore: test user and group ID (of the GitHub runner)

Browse source
This commit is contained in:
Jeroen de Bruijn 2020-05-07 21:02:52 +02:00
parent 8fd16c9263
commit ca5d0e3c12
No known key found for this signature in database
GPG key ID: 3A2677A1DF38FF9F
1 changed files with 23 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

26
src/renovate.ts
View file

@ -21,8 +21,7 @@ class Renovate {
async runDockerContainer(): Promise<void> {
const renovateDockerUser = 'ubuntu';
const githubActionsDockerGroup = 'docker';
const githubActionsDockerGroupId = this.getDockerGroupId();
const commandArguments = [
'--rm',
`--env ${this.configFileEnv}=${this.configFileMountPath()}`,
@ -30,7 +29,7 @@ class Renovate {
`--volume ${this.configFile}:${this.configFileMountPath()}`,
`--volume /var/run/docker.sock:/var/run/docker.sock`,
`--volume /tmp:/tmp`,
`--user ${renovateDockerUser}:${githubActionsDockerGroup}`,
`--user ${renovateDockerUser}:${githubActionsDockerGroupId}`,
this.docker.image(),
];
const command = `docker run ${commandArguments.join(' ')}`;
@ -41,6 +40,27 @@ class Renovate {
}
}
/**
* Fetch the host docker group of the GitHub Action runner.
*
* The Renovate container needs access to this group in order to have the
* required permissions on the Docker socket.
*/
private getDockerGroupId(): string {
const groups = fs.readFileSync('/etc/group', {
encoding: 'utf-8',
});
/**
* The group file has `groupname:group-password:GID:username-list` as
* structure and we're interested in the `GID` (the group ID).
*
* Source: https://www.thegeekdiary.com/etcgroup-file-explained/
*/
const [, group] = /^docker:x:([1-9][0-9]*):$/m.exec(groups);
return group;
}
private validateArguments(): void {
if (!fs.existsSync(this.configFile)) {
throw new Error(