Skip to content

Commit ec737a9

Browse files
committed
Make files copied to user home from host system fully accessible to user
1 parent 6afe4eb commit ec737a9

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

pacstall-docker-builder

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -320,14 +320,15 @@ RUN if [[ \$(dpkg --print-architecture) == "amd64" ]]; then \
320320
fi && \
321321
apt-get update && \
322322
apt-get dist-upgrade -y && \
323-
apt-get install wget curl git sudo nano ca-certificates util-linux adduser -y --fix-missing --no-install-recommends && \
323+
apt-get install wget curl git sudo nano ca-certificates util-linux adduser acl -y --fix-missing --no-install-recommends && \
324324
apt-get clean && \
325325
apt-get autoclean && \
326326
apt-get autoremove -y
327327
RUN adduser --disabled-password --gecos '' pacstall && adduser pacstall sudo
328328
RUN echo N | sudo bash -c "\$(curl -fsSL https://raw.githubusercontent.com/pacstall/pacstall/${imgver}/install.sh || wget -q https://raw.githubusercontent.com/pacstall/pacstall/${imgver}/install.sh -O -)" && rm -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb /var/cache/apt/*.bin
329329
RUN echo '%sudo ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers
330330
RUN chown -R pacstall:pacstall /var/log/pacstall && chown -R pacstall:pacstall /tmp/pacstall
331+
RUN setfacl -d -m user:pacstall:rwX /home/pacstall
331332
RUN sudo sed -i 's/ignore_stack=false/ignore_stack=true/g' /usr/bin/pacstall
332333
RUN runuser -l pacstall -c "HOME=/home/pacstall SUDO_USER=pacstall pacstall -U pacstall:${imgver}"
333334
# https://askubuntu.com/a/1026978

0 commit comments

Comments
 (0)