fix: give uid 1000 a passwd entry, so ssh-keygen runs as the runner user #18

Merged
markus merged 1 commits from claude/fix/575-runner-passwd into master 2026-11-12 19:11:09 +00:00
1 Commits
Author SHA1 Message Date
atomicbackspace-agent[bot]andClaude Opus 5.5 474d56779a fix: give uid 1000 a passwd entry, so ssh-keygen runs as the runner user
With openssh-keygen in the image (#17, 12.11.1-ci11), zegit's SSHSIG
oracle test still failed on this runner: `ssh-keygen -Y verify` answered
"No user exists for uid 1000" (exit 255). The pod runs as uid 1000, which
has no /etc/passwd entry here, and ssh-keygen looks the current user up
(zegit#575, Gitea run 25467 job 56050).

The image adds a `runner` user and group for uid/gid 1000 (when the base
has none) with a home directory, and a build step running as uid 1000
signs and verifies an SSHSIG, so a missing entry fails the build.

Checked on the operator workstation: zegit's test fails in ci11 run as
--user 1000 ("No user exists for uid 1000") and passes in this build.

Refs: zegit-zoo/zegit#575
Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-12 17:27:45 +01:00