2 # Copyright (C) The Arvados Authors. All rights reserved.
4 # SPDX-License-Identifier: AGPL-3.0
8 if ! grep "^arvbox:" /etc/passwd >/dev/null 2>/dev/null ; then
9 HOSTUID=$(ls -nd /usr/src/arvados | sed 's/ */ /' | cut -d' ' -f4)
10 HOSTGID=$(ls -nd /usr/src/arvados | sed 's/ */ /' | cut -d' ' -f5)
12 mkdir -p /var/lib/arvados/git /var/lib/gems \
13 /var/lib/passenger /var/lib/gopath /var/lib/pip
15 groupadd --gid $HOSTGID --non-unique arvbox
16 groupadd --gid $HOSTGID --non-unique git
17 useradd --home-dir /var/lib/arvados \
18 --uid $HOSTUID --gid $HOSTGID \
22 useradd --home-dir /var/lib/arvados/git --uid $HOSTUID --gid $HOSTGID --non-unique git
23 useradd --groups docker crunch
25 chown arvbox:arvbox -R /usr/local /var/lib/arvados /var/lib/gems \
26 /var/lib/passenger /var/lib/postgresql \
27 /var/lib/nginx /var/log/nginx /etc/ssl/private \
28 /var/lib/gopath /var/lib/pip
30 mkdir -p /var/lib/gems/ruby
31 chown arvbox:arvbox -R /var/lib/gems/ruby
33 mkdir -p /tmp/crunch0 /tmp/crunch1
34 chown crunch:crunch -R /tmp/crunch0 /tmp/crunch1
36 echo "arvbox ALL=(crunch) NOPASSWD: ALL" >> /etc/sudoers
39 if ! grep "^fuse:" /etc/group >/dev/null 2>/dev/null ; then
40 if test -c /dev/fuse ; then
41 FUSEGID=$(ls -nd /dev/fuse | sed 's/ */ /' | cut -d' ' -f5)
42 groupadd --gid $FUSEGID --non-unique fuse