babbarc/workspaces-pipelines
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: babbarc:1f2d81984bc498b8b9372bc4d7edcea812e01099
Branches Tags
babbarc:master
..
compare: babbarc:c1cbaffe42aa9151dc65ddd46c459c920c7a7871
Branches Tags
babbarc:master

2 Commits
1f2d81984b ... c1cbaffe42

Author SHA1 Message Date
Pallav Vasa
c1cbaffe42 fix: correct filename for update authorized_keys command 2025-05-17 18:56:40 +00:00
Pallav Vasa
99aac09f75 feat: mount podman socket of user mypodmanuser 2025-05-17 18:55:02 +00:00
2 changed files with 3 additions and 1 deletions
Expand all files Collapse all files

2
gitops_router.sh
View File

@ -159,7 +159,7 @@ update)
case "${args[0]}" in case "${args[0]}" in
containerfile) update 0 Containerfile . 500 ;; containerfile) update 0 Containerfile . 500 ;;
access) update 2 access.yml . 400 ;; access) update 2 access.yml . 400 ;;
authorized_keys) update 2 access.yml . 400 ;; authorized_keys) update 2 authorized_keys . 400 ;;
ssh_router) update 1 ssh_router.sh .local/bin 500 ;; ssh_router) update 1 ssh_router.sh .local/bin 500 ;;
gitops_router) update 1 gitops_router.sh .local/bin 500 ;; gitops_router) update 1 gitops_router.sh .local/bin 500 ;;
validate_command) update 1 validate_command_access.sh .local/bin 500 ;; validate_command) update 1 validate_command_access.sh .local/bin 500 ;;

2
ssh_router.sh
View File

@ -6,6 +6,7 @@ WORKSPACE="${SSH_ORIGINAL_COMMAND:-}"
IMAGE="localhost/analytics-backend-workspace:latest" IMAGE="localhost/analytics-backend-workspace:latest"
DEV_USER="devuser" DEV_USER="devuser"
XDG_RUNTIME_DIR="/run/user/$(id -u)" XDG_RUNTIME_DIR="/run/user/$(id -u)"
PODMAN_SOCKET="/run/user/$(id -u mypodmanuser)"
LOG_FILE="/tmp/.ssh-router-${PERSON}.log" LOG_FILE="/tmp/.ssh-router-${PERSON}.log"
# ───────────────────────────────────────────── # ─────────────────────────────────────────────
@ -124,6 +125,7 @@ start_container_if_needed() {
--user "$DEV_USER" \ --user "$DEV_USER" \
--hostname "$WORKSPACE" \ --hostname "$WORKSPACE" \
--label auto-cleanup=true \ --label auto-cleanup=true \
-v "${PODMAN_SOCKET}/podman/podman.sock:/run/podman/podman.sock:z" \
-v "$HOME/data/$WORKSPACE:/app:Z" \ -v "$HOME/data/$WORKSPACE:/app:Z" \
-v "$HOME/secrets/$WORKSPACE/gitconfig:/home/$DEV_USER/.gitconfig:ro,Z" \ -v "$HOME/secrets/$WORKSPACE/gitconfig:/home/$DEV_USER/.gitconfig:ro,Z" \
-v "$HOME/secrets/$WORKSPACE/id_ed25519:/home/$DEV_USER/.ssh/id_ed25519:ro,Z" \ -v "$HOME/secrets/$WORKSPACE/id_ed25519:/home/$DEV_USER/.ssh/id_ed25519:ro,Z" \