fix(ibmcloud): run GitHub Actions runner as non-root user

Author: deekay2310

pkg/integrations/github/snippet-linux-ppc64le.sh

@@ -14,17 +14,22 @@ if [ ! -f /opt/runner-cache/config.sh ]; then
     exit 1
 fi
 
-cd /opt/runner-cache
-export DOTNET_ROOT=/opt/dotnet
-export PATH=$PATH:$DOTNET_ROOT
-
-./config.sh \
-    --unattended \
-    --disableupdate \
-    --ephemeral \
-    --name "{{ .Name }}" \
-    --labels "{{ .Labels }}" \
-    --url "{{ .RepoURL }}" \
-    --token "{{ .Token }}"
-
-nohup ./run.sh > /var/log/gh-runner.log 2>&1 &
+id -u runner &>/dev/null || useradd -m -s /bin/bash runner
+chown -R runner:runner /opt/runner-cache /opt/dotnet
+
+sudo -u runner bash -c '
+    cd /opt/runner-cache
+    export DOTNET_ROOT=/opt/dotnet
+    export PATH=$PATH:$DOTNET_ROOT
+
+    ./config.sh \
+        --unattended \
+        --disableupdate \
+        --ephemeral \
+        --name "{{ .Name }}" \
+        --labels "{{ .Labels }}" \
+        --url "{{ .RepoURL }}" \
+        --token "{{ .Token }}"
+
+    nohup ./run.sh > /tmp/gh-runner.log 2>&1 &
+'

pkg/integrations/github/snippet-linux-s390x.sh

@@ -14,17 +14,22 @@ if [ ! -f /opt/runner-cache/config.sh ]; then
     exit 1
 fi
 
-cd /opt/runner-cache
-export DOTNET_ROOT=/opt/dotnet
-export PATH=$PATH:$DOTNET_ROOT
-
-./config.sh \
-    --unattended \
-    --disableupdate \
-    --ephemeral \
-    --name "{{ .Name }}" \
-    --labels "{{ .Labels }}" \
-    --url "{{ .RepoURL }}" \
-    --token "{{ .Token }}"
-
-nohup ./run.sh > /var/log/gh-runner.log 2>&1 &
+id -u runner &>/dev/null || useradd -m -s /bin/bash runner
+chown -R runner:runner /opt/runner-cache /opt/dotnet
+
+sudo -u runner bash -c '
+    cd /opt/runner-cache
+    export DOTNET_ROOT=/opt/dotnet
+    export PATH=$PATH:$DOTNET_ROOT
+
+    ./config.sh \
+        --unattended \
+        --disableupdate \
+        --ephemeral \
+        --name "{{ .Name }}" \
+        --labels "{{ .Labels }}" \
+        --url "{{ .RepoURL }}" \
+        --token "{{ .Token }}"
+
+    nohup ./run.sh > /tmp/gh-runner.log 2>&1 &
+'