79 lines
1.8 KiB
Go
79 lines
1.8 KiB
Go
package buildah
|
|
|
|
import (
|
|
"fmt"
|
|
"os/user"
|
|
"strconv"
|
|
"strings"
|
|
|
|
"github.com/opencontainers/runtime-spec/specs-go"
|
|
)
|
|
|
|
func getUser(rootdir, userspec string) (specs.User, error) {
|
|
var gid64 uint64
|
|
var gerr error = user.UnknownGroupError("error looking up group")
|
|
|
|
spec := strings.SplitN(userspec, ":", 2)
|
|
userspec = spec[0]
|
|
groupspec := ""
|
|
if userspec == "" {
|
|
return specs.User{}, nil
|
|
}
|
|
if len(spec) > 1 {
|
|
groupspec = spec[1]
|
|
}
|
|
|
|
uid64, uerr := strconv.ParseUint(userspec, 10, 32)
|
|
if uerr == nil && groupspec == "" {
|
|
// We parsed the user name as a number, and there's no group
|
|
// component, so we need to look up the user's primary GID.
|
|
name := ""
|
|
name, gid64, gerr = lookupGroupForUIDInContainer(rootdir, uid64)
|
|
if gerr == nil {
|
|
userspec = name
|
|
} else {
|
|
if userrec, err := user.LookupId(userspec); err == nil {
|
|
gid64, gerr = strconv.ParseUint(userrec.Gid, 10, 32)
|
|
userspec = userrec.Name
|
|
}
|
|
}
|
|
}
|
|
if uerr != nil {
|
|
uid64, gid64, uerr = lookupUserInContainer(rootdir, userspec)
|
|
gerr = uerr
|
|
}
|
|
if uerr != nil {
|
|
if userrec, err := user.Lookup(userspec); err == nil {
|
|
uid64, uerr = strconv.ParseUint(userrec.Uid, 10, 32)
|
|
gid64, gerr = strconv.ParseUint(userrec.Gid, 10, 32)
|
|
}
|
|
}
|
|
|
|
if groupspec != "" {
|
|
gid64, gerr = strconv.ParseUint(groupspec, 10, 32)
|
|
if gerr != nil {
|
|
gid64, gerr = lookupGroupInContainer(rootdir, groupspec)
|
|
}
|
|
if gerr != nil {
|
|
if group, err := user.LookupGroup(groupspec); err == nil {
|
|
gid64, gerr = strconv.ParseUint(group.Gid, 10, 32)
|
|
}
|
|
}
|
|
}
|
|
|
|
if uerr == nil && gerr == nil {
|
|
u := specs.User{
|
|
UID: uint32(uid64),
|
|
GID: uint32(gid64),
|
|
Username: userspec,
|
|
}
|
|
return u, nil
|
|
}
|
|
|
|
err := fmt.Errorf("%v determining run uid", uerr)
|
|
if uerr == nil {
|
|
err = fmt.Errorf("%v determining run gid", gerr)
|
|
}
|
|
return specs.User{}, err
|
|
}
|