spindle: create spindle user to run spindle server and add spindle user to docker group

Signed-off-by: tjh <did:plc:65gha4t3avpfpzmvpbwovss7>

conf.sh

···
 knotserver_repo_path=/var/lib/tangled
 knotserver_log_directory=/var/log/knotserver
 
-spindle_user=root
-spindle_group=root
+spindle_user=spindle
+spindle_group=spindle
 spindle_path=/var/lib/spindle
+spindle_add_to_docker=true

spindle/.SRCINFO

···
 	options = !debug
 	source = tangled::git+https://tangled.org/@tangled.org/core#tag=v1.9.1-alpha
 	source = spindle.service
+	source = spindle.sysusers
 	source = spindle-tmpfiles.conf
 	sha256sums = 5562ff3aef0b7e986cccfa778d7abb6003311c44a7df79709a40604782cdef24
-	sha256sums = a4ed59649478b17ed2e2beea955be42746c0c6fc26d596164845bd7098af59fa
-	sha256sums = 2abd16b1b058876cc804057d9e5eb9ae39536d9a83c212326d48d3a7ba89bbd4
+	sha256sums = 6509c3c71ed305cc8cdf59f54261538a2f554621ae6116bb2f78ebe92b8d64bb
+	sha256sums = 1364062c3d0daa6fa8fc439bf26e88585d503a36b9f8335bae037f659b08bd15
+	sha256sums = 28673b854e9cd65cb129f46bc1dc894fb74a62fa3b976f2e1e5737558096b499
 
 pkgname = spindle

spindle/PKGBUILD

···
 options=(strip !debug)
 source=("tangled::git+$url#tag=v${_pkgver}"
 		${_pkgname}.service
+		${_pkgname}.sysusers
 		${_pkgname}-tmpfiles.conf)
 sha256sums=('5562ff3aef0b7e986cccfa778d7abb6003311c44a7df79709a40604782cdef24'
-            'a4ed59649478b17ed2e2beea955be42746c0c6fc26d596164845bd7098af59fa'
-            '2abd16b1b058876cc804057d9e5eb9ae39536d9a83c212326d48d3a7ba89bbd4')
+            '6509c3c71ed305cc8cdf59f54261538a2f554621ae6116bb2f78ebe92b8d64bb'
+            '1364062c3d0daa6fa8fc439bf26e88585d503a36b9f8335bae037f659b08bd15'
+            '28673b854e9cd65cb129f46bc1dc894fb74a62fa3b976f2e1e5737558096b499')
 
 build() {
 	mkdir -p ${srcdir}/build
···
 
 package() {
 	install -Dm644 "${srcdir}/${_pkgname}.service" "${pkgdir}/usr/lib/systemd/system/${_pkgname}.service"
+	install -Dm644 "${srcdir}/${_pkgname}.sysusers" "${pkgdir}/usr/lib/sysusers.d/${_pkgname}.conf"
 	install -Dm644 "${srcdir}/${_pkgname}-tmpfiles.conf" "${pkgdir}/usr/lib/tmpfiles.d/${_pkgname}.conf"
 	install -Dm755 "${srcdir}/build/spindle" "${pkgdir}/usr/bin/spindle"
 	install -Dm644 "${srcdir}/tangled/license" "${pkgdir}/usr/share/licenses/tangled/spindle.LICENSE"

spindle/spindle-tmpfiles.conf

···
-d /var/lib/spindle 755 root root -
+d /var/lib/spindle 755 spindle spindle -

spindle/spindle.service

···
 WorkingDirectory=/var/lib/spindle
 ExecStart=/usr/bin/spindle
 Restart=always
-User=root
-Group=root
+User=spindle
+Group=spindle
 StandardOutput=journal
 StandardError=journal
 LimitNOFILE=65536

spindle/spindle.sysusers

···
+u! spindle - "spindle server" /var/lib/spindle /usr/bin/nologin
+m spindle docker

src/spindle-shared/sysusers.sh

···
+#!/usr/bin/bash
+set -eu
+cat << EOF > ${pkgbuild_path}/spindle.sysusers
+u! ${spindle_user} - "spindle server" ${spindle_path} /usr/bin/nologin
+EOF
+
+if [[ "${spindle_add_to_docker}" == true ]]; then
+cat << EOF >> ${pkgbuild_path}/spindle.sysusers
+m ${spindle_user} docker
+EOF
+fi

src/spindle/PKGBUILD.sh

···
 options=(strip !debug)
 source=("tangled::git+\$url#tag=v\${_pkgver}"
 		\${_pkgname}.service
+		\${_pkgname}.sysusers
 		\${_pkgname}-tmpfiles.conf)
 sha256sums=('set by updpkgsums'
+            'set by updpkgsums'
             'set by updpkgsums'
             'set by updpkgsums')
 
···
 
 package() {
 	install -Dm644 "\${srcdir}/\${_pkgname}.service" "\${pkgdir}/usr/lib/systemd/system/\${_pkgname}.service"
+	install -Dm644 "\${srcdir}/\${_pkgname}.sysusers" "\${pkgdir}/usr/lib/sysusers.d/\${_pkgname}.conf"
 	install -Dm644 "\${srcdir}/\${_pkgname}-tmpfiles.conf" "\${pkgdir}/usr/lib/tmpfiles.d/\${_pkgname}.conf"
 	install -Dm755 "\${srcdir}/build/spindle" "\${pkgdir}/usr/bin/spindle"
 	install -Dm644 "\${srcdir}/tangled/license" "\${pkgdir}/usr/share/licenses/tangled/spindle.LICENSE"

update.sh

···
 done
 
 for pkgbuild_path in spindle; do
+  for src in src/spindle-shared/*.sh; do
+    source ${src}
+  done
   for src in src/${pkgbuild_path}/*.sh; do
     source ${src}
   done