From: Christian Couder <christian.couder@gmail.com>
Date: Fri, 24 Jan 2025 09:56:17 GMT
Subject: Re: [PATCH v4 03/10] github: adapt containerized jobs to be rootless
Message-ID: <CAP8UFD3cdA9P6-bm6XNFCapsUqEpVQ3Nw-2-5quAQMkT_p0sfQ@mail.gmail.com>
In-Reply-To: <20250110-b4-pks-ci-fixes-v4-3-6e4613446080@pks.im>

On Fri, Jan 10, 2025 at 12:34 PM Patrick Steinhardt <ps@pks.im> wrote:
>
> The containerized jobs in GitHub Actions run as root, giving them
> special permissions to for example delete files even when the user
> shouldn't be able to due to file permissions. This limitation keeps us
> from using containerized jobs for most of our Ubuntu-based jobs as it
> causes a number of tests to fail.
>
> Adapt the jobs to create a separate user that executes the test suite.
> This follows similar infrastructure that we already have in GitLab CI.

Nit (not worth a reroll): It might help a bit to say something like:

 "This requires installing the 'sudo' and 'shadow-utils' (for
`useradd`) packages."