Running STI test as non-root

[Miro Hrončok]

Hello CI,

we have discovered a serious usability problem in one of our packages that 
existed for a while but did not show on the CI.

Apparently, the problem only shows up when actual users do the things.
However, our STI tests on Fedora CI run as root, hiding the issue.

I want to stop running our tests as root. Is there some idiomatic way to do that?

I was thinking about changing this:

     tests:
     - smoke_pypy38:
         dir: python/smoke
         run: PYTHON=pypy3.8 VERSION=3.8 ./venv.sh
     - smoke_pypy39:
         dir: python/smoke
         run: PYTHON=pypy3.9 VERSION=3.9 ./venv.sh

To this:

     tests:
     - create_user:
         run: adduser testuser
     - smoke_pypy38:
         dir: python/smoke
         run: runuser testuser -c 'PYTHON=pypy3.8 VERSION=3.8 ./venv.sh'
     - smoke_pypy39:
         dir: python/smoke
         run: runuser testuser -c 'PYTHON=pypy3.9 VERSION=3.9 ./venv.sh'


But is there some better way?

-- 
Miro Hrončok
-- 
Phone: [phone]
IRC: mhroncok

[Miro Hrončok]

On 09. 06. 22 11:33, Miro Hrončok wrote:
>       tests:
>       - create_user:
>           run: adduser testuser 
This might be better for creating the user, will check if it works:

     - ansible.builtin.user:
         name: testuser



-- 
Miro Hrončok
-- 
Phone: [phone]
IRC: mhroncok