feat: update workflow

.github/workflows/main.yml

@@ -9,5 +9,6 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v2
+
       - run: docker build . --file Dockerfile --tag build-environment
-      - run: docker run -i --log-driver=none -a stdin -a stdout -a stderr -v "$(pwd)":/app build-environment
+      - run: docker run --privileged=true -i --log-driver=none -a stdin -a stdout -a stderr -v "$(pwd)":/app build-environment

Dockerfile

@@ -2,14 +2,38 @@
 FROM alt:p9
 
 RUN apt-get update \
-&& apt-get install -y cmake rpm-macros-cmake cmake-modules gcc-c++ qt5-base-devel qt5-tools-devel qt5-base-common doxygen libxerces-c-devel rpm-build gear xsd \
-&& useradd -ms /bin/bash builder && mkdir /app && chown root:builder /app
+    && apt-get install -y git \
+    gear \
+    hasher \
+    hasher-priv \
+    hasher-rich-chroot \
+    hasher-rich-chroot-user-utils \
+    rpm-utils \
+    rpm-build \
+    rpm-build-licenses \
+    rpm-macros-cmake \
+    rpm-macros-make \
+    rpm-macros-generic-compat \
+    apt-repo \
+    apt-repo-tools \
+    sudo \
+    && export CURRENT_PWD=`pwd` \
+    && useradd -ms /bin/bash builder2 \
+    && groupadd sudo \
+    && usermod -aG rpm builder2 \
+    && usermod -aG sudo root \
+    && usermod -aG sudo builder2 \
+    && echo "root ALL=(ALL) NOPASSWD:ALL" | tee -a /etc/sudoers \
+    && echo "builder2 ALL=(ALL) NOPASSWD:ALL" | tee -a /etc/sudoers \
+    && hasher-useradd builder2 \
+    && mkdir /app \
+    && chown root:builder2 /app
 
 # Copies your code file from your action repository to the filesystem path `/` of the container
 COPY script/build.sh /build.sh
 
-USER builder
-WORKDIR /home/builder
+USER builder2
+WORKDIR /home/builder2
 
 # Code file to execute when the docker container starts up (`build.sh`)
 ENTRYPOINT ["/build.sh"]

hasher/config

@@ -0,0 +1,5 @@
+packager="gpui-github-bot@basealt.ru"
+no_sisyphus_check="packager,buildhost,gpg"
+allowed_mountpoints=/dev/pts,/proc,/dev/shm
+lazy_cleanup=1
+

script/build.sh

@@ -1,3 +1,8 @@
-#!/bin/bash
+#!/bin/bash -ex
 
-cd /app/ && gear-rpm -ba
+mkdir /home/builder2/hasher 
+mkdir /home/builder2/.hasher
+cp /app/hasher/config /home/builder2/.hasher/config 
+hsh --initroot-only --no-wait-lock -vv /home/builder2/hasher 
+
+cd /app/ && gear-hsh