docker: move sudoers as a file

diff --git a/docker/Dockerfile b/docker/Dockerfile
index e78d4b8e7a70c123df08fcd0bf17b0cb10a53c23..0518b64da74b01b1da62e1d142c25a62d0337520 100644 (file)
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -8,6 +8,7 @@ WORKDIR /dist
 COPY rpmmacros ./home/builder/.rpmmacros
 # overwrite with our config (it defines same path, but disabled)
 COPY localrpms.conf ./etc/poldek/source.conf
+COPY sudoers ./etc/sudoers.d/builder
 
 # use sane permissions until solved upstream
 # https://gitlab.com/gitlab-org/gitlab-runner/issues/1736
@@ -21,9 +22,6 @@ RUN set -x \
        && poldek -u rpm-build perl-modules pwdutils coreutils util-linux git-core gawk sudo ccache-wrapper \
        # this will setup builder user
        && poldek -u pld-builder-chroot \
-       # for builder -R
-       && echo 'builder ALL = NOPASSWD:/usr/bin/poldek -q --update --upa' > /etc/sudoers.d/builder \
-       && echo 'builder ALL = NOPASSWD:/usr/bin/poldek --noask --caplookup --uniq -uG *' >>  /etc/sudoers.d/builder \
        # configures empty dir
        && rm /etc/poldek/repos.d/pld-builder.conf \
        # preserve downloaded packages

diff --git a/docker/sudoers b/docker/sudoers
new file mode 100644 (file)
index 0000000..1b16e3b
--- /dev/null
+++ b/docker/sudoers
@@ -0,0 +1,5 @@
+# for builder -R
+builder ALL = NOPASSWD:/usr/bin/poldek -q --update --upa
+builder ALL = NOPASSWD:/usr/bin/poldek --noask --caplookup --uniq -uG *
+
+# vim:ft=sudoers