Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,8 +8,9 @@ other purpose.

- Images are only built for the `linux/amd64` and `linux/arm64` platforms, since these are the only Linux platforms
supported by Please.
- By default, commands are executed in the container by the `runner` user. This user is allowed to run sudo without a
password.
- By default, commands are executed in the container by the `runner` user (UID 1001), whose primary group is similarly
`runner` (GID 1001). These match the user and group names and IDs used by the equivalent user in GitHub's official
Ubuntu runner images. The `runner` user is allowed to run sudo without a password.
- Additional run-time dependencies for Please and the `pleasew` script are installed from the Alpine Linux repositories:
- `bash`
- `curl`
Expand Down
5 changes: 3 additions & 2 deletions alpine-builder.Containerfile
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,10 @@ RUN apk --no-cache add \
python3 python3-dev py3-pip

# Create a non-root user (that can still run commands as root if required), and use it by default.
# This is identical to how the GitHub-hosted runners are configured.
# The user and group names are identical to those on GitHub's official Ubuntu runner images.
RUN apk --no-cache add sudo && \
adduser -D runner && \
addgroup -g 1001 runner && \
adduser -u 1001 -G runner -D runner && \
echo runner:runner | chpasswd && \
echo 'Defaults:runner !requiretty' > /etc/sudoers.d/runner && \
echo 'runner ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/runner && \
Expand Down