Merge pull request myoung34#268 from lumagi/remove_recursive_chown

Change recursive chown to flat chown for tools directory
iamironz · Dec 12, 2022 · b92d941 · b92d941
2 parents b89c3a1 + cb7a831
commit b92d941
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/entrypoint.sh b/entrypoint.sh
@@ -153,7 +153,9 @@ if [[ ${_RUN_AS_ROOT} == "true" ]]; then
 else
   if [[ $(id -u) -eq 0 ]]; then
     [[ -n "${CONFIGURED_ACTIONS_RUNNER_FILES_DIR}" ]] && /usr/bin/chown -R runner "${CONFIGURED_ACTIONS_RUNNER_FILES_DIR}"
-    /usr/bin/chown -R runner "${_RUNNER_WORKDIR}" /opt/hostedtoolcache/ /actions-runner
+    /usr/bin/chown -R runner "${_RUNNER_WORKDIR}" /actions-runner
+    # The toolcache is not recursively chowned to avoid recursing over prepulated tooling in derived docker images
+    /usr/bin/chown runner /opt/hostedtoolcache/
     /usr/sbin/gosu runner "$@"
   else
     "$@"