MINOR: added comand line options to set uid and gid

rmaticevic · rmaticevic · commit 0e3a29629a56 · 2021-04-16T15:18:10.000+02:00
diff --git a/cmd/dataplaneapi/main.go b/cmd/dataplaneapi/main.go
@@ -19,6 +19,7 @@ import (
 	"fmt"
 	"os"
 	"path"
+	"syscall"
 
 	loads "github.com/go-openapi/loads"
 	"github.com/go-openapi/runtime"
@@ -119,6 +120,19 @@ func startServer(cfg *configuration.Configuration) (reload configuration.AtomicB
 	if err != nil {
 		log.Fatalln(err)
 	}
+
+	if cfg.HAProxy.UID != 0 {
+		if err = syscall.Setuid(cfg.HAProxy.UID); err != nil {
+			log.Fatalln("set uid:", err)
+		}
+	}
+
+	if cfg.HAProxy.GID != 0 {
+		if err = syscall.Setgid(cfg.HAProxy.GID); err != nil {
+			log.Fatalln("set gid:", err)
+		}
+	}
+
 	// incorporate changes from file to global settings
 	dataplaneapi.SyncWithFileSettings(server, cfg)
 	err = cfg.LoadRuntimeVars(dataplaneapi.SwaggerJSON, server.Host, server.Port)
diff --git a/configuration/configuration.go b/configuration/configuration.go
@@ -63,6 +63,8 @@ type HAProxyConfiguration struct {
 	ValidateCmd          string `long:"validate-cmd" description:"Executes a custom command to perform the HAProxy configuration check" group:"reload"`
 	DisableInotify       bool   `long:"disable-inotify" description:"Disables inotify watcher watcher for the configuration file" group:"dataplaneapi"`
 	PIDFile              string `long:"pid-file" description:"Path to file that will dataplaneapi use to write its pid" group:"dataplaneapi" example:"/tmp/dataplane.pid"`
+	UID                  int    `long:"uid" description:"User id value to set on start" group:"dataplaneapi"`
+	GID                  int    `long:"gid" description:"Group id value to set on start" group:"dataplaneapi"`
 }
 
 type User struct {
diff --git a/configuration/configuration_generated.go b/configuration/configuration_generated.go

Original file line number	Diff line number	Diff line change
`@@ -63,6 +63,8 @@ type HAProxyConfiguration struct {`
`63`	`63`	ValidateCmd string `long:"validate-cmd" description:"Executes a custom command to perform the HAProxy configuration check" group:"reload"`
`64`	`64`	DisableInotify bool `long:"disable-inotify" description:"Disables inotify watcher watcher for the configuration file" group:"dataplaneapi"`
`65`	`65`	PIDFile string `long:"pid-file" description:"Path to file that will dataplaneapi use to write its pid" group:"dataplaneapi" example:"/tmp/dataplane.pid"`
	`66`	+ UID int `long:"uid" description:"User id value to set on start" group:"dataplaneapi"`
	`67`	+ GID int `long:"gid" description:"Group id value to set on start" group:"dataplaneapi"`
`66`	`68`	`}`
`67`	`69`
`68`	`70`	`type User struct {`