hakurei/internal/app/spaccount.go

package app

import (
	"fmt"
	"syscall"

	"hakurei.app/container"
	"hakurei.app/hst"
)

// spAccountOp sets up user account emulation inside the container.
type spAccountOp struct{}

func (s spAccountOp) toSystem(state *outcomeStateSys, _ *hst.Config) error {
	const fallbackUsername = "chronos"

	// do checks here to fail before fork/exec
	if state.Container == nil || state.Container.Home == nil || state.Container.Shell == nil {
		// unreachable
		return syscall.ENOTRECOVERABLE
	}
	if state.Container.Username == "" {
		state.Container.Username = fallbackUsername
	} else if !isValidUsername(state.Container.Username) {
		return newWithMessage(fmt.Sprintf("invalid user name %q", state.Container.Username))
	}
	return nil
}

func (s spAccountOp) toContainer(state *outcomeStateParams) error {
	state.params.Dir = state.Container.Home
	state.env["HOME"] = state.Container.Home.String()
	state.env["USER"] = state.Container.Username
	state.env["SHELL"] = state.Container.Shell.String()

	state.params.
		Place(container.AbsFHSEtc.Append("passwd"),
			[]byte(state.Container.Username+":x:"+
				state.mapuid.String()+":"+
				state.mapgid.String()+
				":Hakurei:"+
				state.Container.Home.String()+":"+
				state.Container.Shell.String()+"\n")).
		Place(container.AbsFHSEtc.Append("group"),
			[]byte("hakurei:x:"+state.mapgid.String()+":\n"))

	return nil
}