moby-derp 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 290a7b49ad9be080d13d38d95afb6f0ec3a242f18195538eb4c38ea236b7d52e
-  data.tar.gz: 30663c89f116294188131c481854c2a97b2aa4827792ab11944e2ba9ae2bd552
+  metadata.gz: b4872cf7a3115e157c1cd297c180db60444a7b46064e6192564ba9d89f3477d9
+  data.tar.gz: 216b70b7af5e4a9e695dfcb3a668bc1fa3483ebed98ed010783977db4e20972b
 SHA512:
-  metadata.gz: 276f7e10f3e8c08bad227a44980f966d26ac176d63d970df0adcd6f853323128d3144cd5e2cff381334a55754b4badcb1224ec5691b743b3619f6a08957e111d
-  data.tar.gz: 7c30674a604b9470ed09b552501cb099b0941fee066770580924cc2f9a597cd25e1470907d2589d9515d8e2c925ca61c6a210722766279554478dd39065eb415
+  metadata.gz: dd9a21877adc23193d59050030abd4257d83a3de86ba5c8e722ea5fd772583f142ac4a9cc381c8c1acbc93152506dceb3fa3f63889c9fcd0a9b9d3c08dc38718
+  data.tar.gz: 45cc46def1400c188fbf12b2d5ab0ff3e584d16ee3d9c83875dfd231b5f10bfe30813ce015533aa19a68aae479421208e470a5b98713bc1a1832692c96426741

data/example.yml

@@ -122,6 +122,13 @@ containers:
     #
     stop_timeout: 42
 
+    # The default user under which commands in the container should be run.
+    # Can be `<user>`, `<user>:<group>`, or even `:<group>`, and the user
+    # and group can either be a name (which must exist in the *container's*
+    # `/etc/passwd` / `/etc/group` file), or a numeric ID.
+    #
+    user: fred:flintstone
+
     # Adjust the container's restart policy.
     #
     restart: on-failure:42

data/lib/moby_derp/container.rb

@@ -92,6 +92,10 @@ module MobyDerp
 				params["StopSignal"]  = @config.stop_signal
 				params["StopTimeout"] = @config.stop_timeout
 
+				if @config.user
+					params["User"] = @config.user
+				end
+
 				if @config.readonly
 					params["HostConfig"]["ReadonlyRootfs"] = true
 				end

data/lib/moby_derp/container_config.rb

@@ -7,7 +7,7 @@ require "docker-api"
 module MobyDerp
 	class ContainerConfig
 		attr_reader :name, :image, :update_image, :command, :environment, :mounts,
-		            :labels, :readonly, :stop_signal, :stop_timeout, :restart, :limits
+		            :labels, :readonly, :stop_signal, :stop_timeout, :user, :restart, :limits
 
 		def initialize(system_config:,
 		               pod_config:,
@@ -21,13 +21,14 @@ module MobyDerp
 		               readonly: false,
 		               stop_signal: "SIGTERM",
 		               stop_timeout: 10,
+		               user: nil,
 		               restart: "no",
 		               limits: {}
 		              )
 			@system_config, @pod_config, @name, @image = system_config, pod_config, "#{pod_config.name}.#{container_name}", image
 
 			@update_image, @command, @environment, @mounts, @labels = update_image, command, environment, mounts, labels
-			@readonly, @stop_signal, @stop_timeout, @restart = readonly, stop_signal, stop_timeout, restart
+			@readonly, @stop_signal, @stop_timeout, @user, @restart = readonly, stop_signal, stop_timeout, user, restart
 			@limits = limits
 
 			validate_image
@@ -39,6 +40,7 @@ module MobyDerp
 			validate_readonly
 			validate_stop_signal
 			validate_stop_timeout
+			validate_user
 			validate_restart
 			validate_limits
 		end
@@ -149,6 +151,15 @@ module MobyDerp
 			end
 		end
 
+		def validate_user
+			return if @user.nil?
+
+			unless @user =~ /\A([a-zA-Z0-9_-]+)?(:[a-zA-Z0-9_-]+)?\z/
+				raise ConfigurationError,
+				      "invalid user specification"
+			end
+		end
+
 		def validate_restart
 			unless @restart.is_a?(String)
 				raise ConfigurationError,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: moby-derp
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Matt Palmer
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-04-26 00:00:00.000000000 Z
+date: 2019-05-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: docker-api