Run user programs as nobody:nogroup

[gruntmaster-daemon.git] / ex / makevm

diff --git a/ex/makevm b/ex/makevm
index 81fbde81fa96a9a3cd57506ff7314137955eff17..c054cf15700bdf184137a2ecf3ec9d8c4039c3e4 100755 (executable)
--- a/ex/makevm
+++ b/ex/makevm
@@ -1,9 +1,17 @@
 #!/bin/bash
+GROUP=$(getent group www-data | cut -f3 -d:)
+USER=$(getent passwd www-data | cut -f3 -d:)
+
 rm -rf vm/ vm.squashfs
+mkdir -p vm/proc/
+mount /proc -o bind vm/proc
 multistrap -f ex/vm.conf
 ln -s vm/usr/bin/mawk vm/bin/awk
-echo 'virtfs /mnt 9p trans=virtio,auto 0 0' > vm/etc/fstab
 echo '/sbin/poweroff -f' > vm/.bash_logout
+cat > vm/etc/fstab <<EOF
+virtfs /mnt 9p    trans=virtio,auto 0 0
+tmpfs  /tmp tmpfs defaults          0 0
+EOF
 cat > vm/.profile <<EOF
 mount -a
 stty -F /dev/ttyS1 -echo
@@ -17,6 +25,8 @@ squashfs
 9pnet_virtio
 EOF
 install gruntmaster-exec gruntmaster-compile vm/usr/bin/
+sed -i -e "s/USER => 65534/USER => $USER/" -e "s/GROUP => 65534/GROUP => $GROUP/" vm/usr/bin/gruntmaster-exec
 chroot vm update-initramfs -d -k 3.2.0-4-amd64
 chroot vm update-initramfs -c -k 3.2.0-4-amd64
+umount vm/proc
 mksquashfs vm vm.squashfs -comp lzo