hantim/hantim-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use sudo for deploy scripts instead of chown on repo

Browse Source 
The deploy user runs scripts as root via passwordless sudo,
avoiding ownership conflicts with Docker-mounted volumes.
This commit is contained in:
Timothy Kim
2026-03-13 15:58:42 -04:00
parent e53ac6324a
commit a3cb7680f3
3 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/deploy-dispatch.sh
+2 -2
View File
@@ -2,8 +2,8 @@
set -euo pipefail set -euo pipefail
case "$SSH_ORIGINAL_COMMAND" in case "$SSH_ORIGINAL_COMMAND" in
deploy-nginx) /opt/hantim/scripts/deploy-nginx.sh ;; deploy-nginx) sudo /opt/hantim/scripts/deploy-nginx.sh ;;
deploy-timothykim) /opt/hantim/scripts/deploy-timothykim.sh ;; deploy-timothykim) sudo /opt/hantim/scripts/deploy-timothykim.sh ;;
*) *)
echo "Unknown command: $SSH_ORIGINAL_COMMAND" echo "Unknown command: $SSH_ORIGINAL_COMMAND"
echo "Available: deploy-nginx, deploy-timothykim" echo "Available: deploy-nginx, deploy-timothykim"
scripts/new-app.sh
+1 -1
View File
@@ -38,7 +38,7 @@ EOF
chmod +x "$REPO_ROOT/scripts/deploy-$APP.sh" chmod +x "$REPO_ROOT/scripts/deploy-$APP.sh"
echo "Adding $APP to deploy-dispatch.sh..." echo "Adding $APP to deploy-dispatch.sh..."
sed -i "/^ \*)$/i\\ deploy-$APP) /opt/hantim/scripts/deploy-$APP.sh ;;" \ sed -i "/^ \*)$/i\\ deploy-$APP) sudo /opt/hantim/scripts/deploy-$APP.sh ;;" \
"$REPO_ROOT/scripts/deploy-dispatch.sh" "$REPO_ROOT/scripts/deploy-dispatch.sh"
echo "Creating .gitea/workflows/deploy-$APP.yml..." echo "Creating .gitea/workflows/deploy-$APP.yml..."
setup.sh
+6 -1
View File
@@ -86,7 +86,12 @@ if [ ! -f /home/deploy/.ssh/authorized_keys ]; then
echo " into /home/deploy/.ssh/authorized_keys" echo " into /home/deploy/.ssh/authorized_keys"
fi fi
chown -R deploy:deploy /home/deploy/.ssh chown -R deploy:deploy /home/deploy/.ssh
su -s /bin/bash deploy -c "git config --global --add safe.directory $REPO_DIR"
echo "==> Configuring sudo for deploy user..."
cat > /etc/sudoers.d/deploy <<SUDOERS
deploy ALL=(root) NOPASSWD: /opt/hantim/scripts/deploy-*.sh
SUDOERS
chmod 440 /etc/sudoers.d/deploy
# --- Start services --- # --- Start services ---