From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6622136737823981568 X-Received: by 2002:a1c:7e8c:: with SMTP id z134-v6mr955022wmc.7.1541836359927; Fri, 09 Nov 2018 23:52:39 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a1c:7ec2:: with SMTP id z185-v6ls741241wmc.26.gmail; Fri, 09 Nov 2018 23:52:39 -0800 (PST) X-Google-Smtp-Source: AJdET5cXkHD+3c1GxXOJJamshx38fZNl+DfqRa4I6m++vAtse26cFinI1I8jl8gbHBB+W138z32C X-Received: by 2002:a1c:b482:: with SMTP id d124-v6mr44893wmf.16.1541836359512; Fri, 09 Nov 2018 23:52:39 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1541836359; cv=none; d=google.com; s=arc-20160816; b=p5yPgd3c/Bj3LFoFF46m78VXs1B36jac8zYwO7/Rmq51blgd6fOhibsB+CijRsd6gX frh5JDJ45k5njMPP7Odsh7YpXCVaSOEyatkxOIlf/0YQnruMcv35djXZxuBXrydhG+NN 8QtUF3OA69/Hiygfd6MReWaNal832Ivgf9cUbd3+uDnO0uSHw1oCjYKsi6UjNmsmkIHw 0MpoQJF67N7vXstTmeV1YiFP8tmEAh9jQCAb9CxQ6PWcIEyIxBnLIM8AYvyFEpqEIkg8 u6oSFNQUU9qmFX5NfOVYadQbAXPswLbfHtYIakY1idUaS2DVHN6CKd9AF9BDjnosweDP yt0w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:mime-version:user-agent :date:message-id:subject:from:cc:to; bh=YA6pzs5rf0RW7N8pwgWQVKOpJqf1nOsBk+hgtFoUsMA=; b=eZhvWf6kh3E8qEPxotnVLKuGMxpizd7LShRTX0mOnMa2zb7DNl9vswWzD2ZETT583v uAPDlwaGhHtkwMh11BKy9L1ClO0NcKX+WINOiiDFswPrtdjNOk3R2wfVnc7a/ns9ux2r gpMCd5bG4/ixxndemptPzbWZSX4ee7qB+EK+zsPSHoyxLFnHi3YkImFKpNDvhMLRRXrP qiTPJpyexbyA6nRo0lXA+D6cBR6FV7oVXHQ5fT6tqA7b6vlSrLv+Ivx9I4NFor45JbX4 eHpgSpaTdI5p0mIQPXsCQbK9p3Dl08Kbl4QO5JD4u+bBXYvO7yU2p3P/nGO+Ds/q9evl IQvg== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@web.de designates 212.227.15.3 as permitted sender) smtp.mailfrom=jan.kiszka@web.de Return-Path: Received: from mout.web.de (mout.web.de. [212.227.15.3]) by gmr-mx.google.com with ESMTPS id t184-v6si52725wmd.0.2018.11.09.23.52.39 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 09 Nov 2018 23:52:39 -0800 (PST) Received-SPF: pass (google.com: domain of jan.kiszka@web.de designates 212.227.15.3 as permitted sender) client-ip=212.227.15.3; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of jan.kiszka@web.de designates 212.227.15.3 as permitted sender) smtp.mailfrom=jan.kiszka@web.de Received: from [192.168.1.10] ([95.157.57.47]) by smtp.web.de (mrweb002 [213.165.67.108]) with ESMTPSA (Nemesis) id 0LtoCT-1fKvf143GP-011CCo; Sat, 10 Nov 2018 08:52:39 +0100 X-Mozilla-News-Host: news://news.gmane.org:119 To: isar-users Cc: Henning Schild From: Jan Kiszka Subject: [PATCH] buildchroot: Align UID and GID of builder user with caller Message-ID: <0ec8a678-7297-4ad9-4a9b-49d87f504061@web.de> Date: Sat, 10 Nov 2018 08:52:38 +0100 User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.8.1.12) Gecko/20080226 SUSE/2.0.0.12-1.1 Thunderbird/2.0.0.12 Mnenhy/0.7.5.666 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K1:+ui9uij6yt1e821inSrv79h0fhgm9iJefayjcR+2oIEZVwTnzFW BO1UA+gtvTxYI73DJUqNFDIn1GDlIcyY4wwobNBrbbmJdLzSBPGUYb6UzUiIgHqEpMnUOB5 ClDPNBl73zubF9jAIw1Jlmt7hxbIT7JZ7bMoqtGIS8X5XTZznrE/FpQ7WzuI8TxXvVwR5lr r+Z1RzgWy6FX4iwGiOsDA== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V01:K0:INZ/EWVRqp4=:T+FZWnnS61/smVGDlvisTy mpsHxK7cINbwXfuxUFX02MicDZddopHfDxOg7xkZtKhYhLFqyfrG/OQTKTJv3ZKh6fnv7BeGZ QwNs3VJYMIYmchnk2PfkcBhae48gKcd5LCSDhXnwyjdqMujd7KkK33lImZGDgvZnxXIEUHof/ n6lnHApOkW1n6oFaPjKQ2LbPFgIVC567e2GCHWtaKH+ES++5Lzf8YfUW1mmOz1LhI4uXI+Hlo MGu1L2nCSlRHpnySYKLLI0lI9XHW9dGspzEpsP/8l0sffuFM6b6TQzxynqIWx6SBwMYD4qamY /BNMgL1K2UCshGS3Wog+CxEMhphfG4zfW9lYAliWsZQ6LudpqFayJqzPVcoFAs27bTBMVXE00 CYRAbwnilV/lADIxd9Nu1fn/H5KJjnI9hiaXtECj5kOFgzy10dQi7hEIemGnC9CYXp/b7K6e6 5EsJYHqJxUoqsvTP2OgXxe0gc7A2tgYVVPXGmzeuTFb7dYvXkFw9L0SDmRSqmgClVct7AmJus EmF4s/7167jjTdCCGPlKqStfB6bI+4y+YcoNfUwq7rts8zQaajVlu6i8p8fj8OgMKbg51rrhS cGYlkPhkcpwh5u5HJiykJ/ocstK2GBKCmgcDmaiMLHx+hNtBUOqNCiZBmenD6zZQoNW67NzTE 7iHyRLoRAk83jtd+Qvt+6SPRbvAMUWaARES7LYyw8dUAB0JKKlLgZopqJh/MLmtsdVKbsYbHs gHOvi7mo2iUgOSiw1+qrDHGoZLhHXpMGAmzjp0kVHcKqiwl9vDJn0V7Qv8MQEGti/vw3+DvWE GQ+1MujHZujLvk2NW5MCeZ5edHy8nLCpOHxGnwT1PXuBSKaAF9Szr9KhvI7WNzAYd1TghiHh6 Z3xy5Z383ZxndiFblrbY9/Y3spscOrR7+y5+7fRXZGJWjN2nSHCfG6ApzEYv9R X-TUID: oTZiGGf5Vkl1 From: Jan Kiszka This fixes EPERM on rebuild and also some clean builds: We have to align the IDs of the builder user with the user in the host environment. Otherwise, files and directories can become unaccessible during the build. Fixes: be291cd991bd ("buildchroot: build debian packages as "builder" not "root"") Signed-off-by: Jan Kiszka --- meta/recipes-devtools/buildchroot/buildchroot.inc | 4 +++- meta/recipes-devtools/buildchroot/files/configscript.sh | 4 ++-- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/meta/recipes-devtools/buildchroot/buildchroot.inc b/meta/recipes-devtools/buildchroot/buildchroot.inc index 7dd909e..2c44db9 100644 --- a/meta/recipes-devtools/buildchroot/buildchroot.inc +++ b/meta/recipes-devtools/buildchroot/buildchroot.inc @@ -36,7 +36,9 @@ do_build() { # Configure root filesystem sudo install -m 755 ${WORKDIR}/configscript.sh ${BUILDCHROOT_DIR} - sudo chroot ${BUILDCHROOT_DIR} /configscript.sh + USER_ID=$(id -u) + GROUP_ID=$(id -g) + sudo chroot ${BUILDCHROOT_DIR} /configscript.sh $USER_ID $GROUP_ID sudo mount --bind ${DL_DIR} ${BUILDCHROOT_DIR}/downloads } diff --git a/meta/recipes-devtools/buildchroot/files/configscript.sh b/meta/recipes-devtools/buildchroot/files/configscript.sh index 30660e7..7e49385 100644 --- a/meta/recipes-devtools/buildchroot/files/configscript.sh +++ b/meta/recipes-devtools/buildchroot/files/configscript.sh @@ -10,6 +10,6 @@ locales locales/locales_to_be_generated multiselect en_US.UTF-8 UTF-8 locales locales/default_environment_locale select en_US.UTF-8 END -addgroup --quiet --system builder -useradd --system --gid builder --no-create-home --home /home/builder --no-user-group --comment "Isar buildchroot build user" builder +addgroup --quiet --system builder --gid $2 +useradd --system --uid $1 --gid builder --no-create-home --home /home/builder --no-user-group --comment "Isar buildchroot build user" builder chown -R builder:builder /home/builder -- 2.16.4