sudo needs to preserve USER env

[projects/cleanbuild.git] / README

Dependencies:

  Missing packages on fresh PLD vserver installation:

  cvsnt
  mount
  perl-base
  poldek
  rpm-build-tools
  subversion
  sudo

Setup:

  # Install all dependencies

  # configure passwordless sudo for user you use for cleanbuild
  visudo

  # add something like (assuming you have 'builder' as dedicated account)
  builder ALL=(ALL) NOPASSWD: ALL
  Defaults:builder env_keep += USER

  # create rpm dir
  builder --init-rpm-dir

  # login to cvs
  cd ~/rpm/packages
  cvs login
  (press enter when asked for password)

  # create directories
  mkdir ~/rpm/cleanRPMS
  mkdir ~/rpm/cleanRPMS.repo

  # checkout svn repo
  svn co http://svn.pld-linux.org/svn/toys/tools/cleanbuild

  # set local user name
  echo 'USER="cleanbuilduser"' > .cleanbuildrc

Notes for vserver:

  If you are inside vserver, you need to have following context capabilities
  (add these lines to /etc/vserver/<name>/ccapabilities):
    SECURE_MOUNT
    BINARY_MOUNT

  And following system capabilities (add these lines to
  /etc/vserver/<name>/bcapabilities):
    MKNOD
    SYS_ADMIN

Run cleanbuild:

  cd cleanbuild
  ./cleanbuild somepkg.spec

You can create yourself alias for easier invocation from regular user:
  alias cleanbuild='_cleanbuild() { sudo -H -u builder sh -c "cd ~/cleanbuild && ./cleanbuild $*"; }; _cleanbuild'
  cleanbuild somepkg