refactor: move to sh scripts (#17)

2021-07-21 08:43:59 +00:00
parent fc531ee59c
commit c84f165490
27 changed files with 526 additions and 651 deletions
@@ -0,0 +1,47 @@
+#!/bin/bash
+
+# disable warning about 'mkdir -m -p'
+# shellcheck disable=SC2174
+
+set -Eeuxo pipefail
+
+printf "\n\t🐋 Creating runner users 🐋\t\n"
+groupadd -g 1001 "${RUNNER}"
+groupadd -g 1000 "${RUNNER}admin"
+useradd -u 1001 -g "${RUNNER}" -G sudo -m -s /bin/bash "${RUNNER}"
+useradd -u 1000 -g "${RUNNER}admin" -G sudo -m -s /bin/bash "${RUNNER}admin"
+echo "${RUNNER} ALL=(ALL) NOPASSWD: ALL" >>/etc/sudoers
+echo "${RUNNER}admin ALL=(ALL) NOPASSWD: ALL" >>/etc/sudoers
+printf "\n\t🐋 Runner user 🐋\t\n"
+su - "${RUNNER}" -c id
+
+printf "\n\t🐋 Runner admin 🐋\t\n"
+su - "${RUNNER}admin" -c id
+
+printf "\n\t🐋 Created non-root user 🐋\t\n"
+grep "${RUNNER}" /etc/passwd
+
+printf "\n\t🐋 Created non-root admin 🐋\t\n"
+grep "${RUNNER}admin" /etc/passwd
+
+sed -i /etc/environment -e "s/USER=root/USER=${RUNNER}/g"
+
+echo "RUNNER_TEMP=/home/${RUNNER}/work/_temp" | tee -a /etc/environment
+mkdir -p "/home/${RUNNER}/work/_temp"
+chown -R "${RUNNER}":"${RUNNER}" "/home/${RUNNER}/work"
+
+mkdir -m 0700 -p "/home/${RUNNER}/.ssh"
+ssh-keyscan -t rsa github.com >>"/home/${RUNNER}/.ssh/known_hosts"
+ssh-keyscan -t rsa ssh.dev.azure.com >>"/home/${RUNNER}/.ssh/known_hosts"
+
+chmod 644 "/home/${RUNNER}/.ssh/known_hosts"
+chown -R "${RUNNER}":"${RUNNER}" "/home/${RUNNER}/.ssh"
+
+# shellcheck disable=SC1091
+. /etc/environment
+
+# Word is of the form "A"B"C" (B indicated). Did you mean "ABC" or "A\"B\"C"?shellcheck(SC2140)
+# shellcheck disable=SC2140
+chown -R "${RUNNER}":"${RUNNER}admin" "$AGENT_TOOLSDIRECTORY"
+
+printf "\n\t🐋 Finished building 🐋\t\n"