From 6a6aab3a88aa07da94ba5e58cbfef6847657ad1a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hannes=20K=C3=B6rber?= <hannes@hkoerber.de>
Date: Fri, 11 Dec 2020 17:53:32 +0100
Subject: [PATCH] Build AUR packages as separate user on arch

---
 playbook.yml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/playbook.yml b/playbook.yml
index 7c3e4b3..0625b00 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -103,6 +103,14 @@
       when: distro == 'fedora'
 
     - block:
+      - name: create build user on arch
+        user:
+          name: makepkg
+          home: /var/lib/makepkg
+          create_home: true
+          shell: /bin/bash
+          system: true
+
       - name: build paru on arch
         shell: |
           set -o errexit
@@ -121,7 +129,8 @@
         args:
           executable: /bin/bash
         register: result
-        become: false # do not build as root!
+        become: true # do not build as root!
+        become_user: makepkg
         changed_when: result.rc != 100
         failed_when: result.rc not in (0, 100)