Struct RunnerAccount 

pub struct RunnerAccount {
    pub uid: u32,
    pub gid: u32,
}

A resolved account: what a runner is started as and what its directories are handed to.

Fields

uid: u32

The account’s user id.

gid: u32

Its primary group id.

Implementations

impl RunnerAccount

pub fn for_this_daemon() -> Result<Option<Self>, String>

The account runners launched by this process run as: Ok(None) when they run as this process does.

Some only for root on Linux with RUNNER_ACCOUNT present, which is what service install --start-at boot sets up. A login service, a foreground daemon and every other platform keep their runners in their own account, as before.

A boot unit’s daemon is root with a narrowed capability bounding set that still holds CAP_DAC_OVERRIDE and the rest of crate::service::BOOT_CAPABILITIES. A runner it started as itself would keep them, so without RUNNER_ACCOUNT it must start none. A root with every capability – sudo runner-manager daemon run in a terminal – keeps its runners as itself, as before.

Errors

Why no runner may start: the account is missing under a confined root.

pub fn lookup(name: &str) -> Option<Self>

The account called name, when it exists.

pub fn ensure() -> Result<Self, String>

RUNNER_ACCOUNT, created as a system account when it is missing.

Errors

What useradd reported, when it had to run and failed.

pub fn give(&self, path: &Path) -> Result<()>

Hands path itself to this account, without following a link there.

Errors

What lchown reported.

pub fn give_tree(&self, path: &Path) -> Result<()>

Hands path and everything under it to this account.

Links are handed over themselves and never followed, so a link a previous job left pointing outside the tree cannot carry the change anywhere else. Below path, a directory the account already owns is not entered: only the account writes inside one, so nothing there needs handing over, and a retained _work or an already handed package is not walked again.

Errors

The first error met, after which the rest of the tree is not visited.

pub fn owns(&self, metadata: &Metadata) -> bool

Whether this account already owns what metadata describes.

Trait Implementations

impl Clone for RunnerAccount

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for RunnerAccount

impl Debug for RunnerAccount

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for RunnerAccount

impl PartialEq for RunnerAccount

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for RunnerAccount