mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-27 10:18:54 +00:00
024b1864b4
By checking various environment variables, we can automatically add the current user to the `firezone-client` group which allows them to connect to the IPC socket of the tunnel process. Unfortunately, they still have to create a new login session / reboot for that to be reflected. The docs update for this will follow once we have cut a release with this code in it. --------- Signed-off-by: Thomas Eizinger <thomas@eizinger.io> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
32 lines
1.0 KiB
Bash
Executable File
32 lines
1.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -euo pipefail
|
|
|
|
SERVICE_NAME="firezone-client-tunnel"
|
|
|
|
DISPLAY_USER=$(who | grep '(login screen)' | awk '{print $1}')
|
|
|
|
if [ -n "${PKEXEC_UID:-}" ]; then
|
|
INVOKING_USER=$(id -un "$PKEXEC_UID" 2>/dev/null) # Detect user from PolicyKit.
|
|
|
|
echo "Detected invoking user from PolicyKit: $INVOKING_USER"
|
|
elif [ -n "${SUDO_USER:-}" ]; then
|
|
INVOKING_USER="$SUDO_USER" # Detect user from `sudo apt/dnf install`.
|
|
|
|
echo "Detected invoking user from SUDO_USER: $INVOKING_USER"
|
|
elif [ -n "${DISPLAY_USER:-}" ]; then
|
|
INVOKING_USER="$DISPLAY_USER" # Detect user from display session.
|
|
|
|
echo "Detected invoking user from display session: $INVOKING_USER"
|
|
fi
|
|
|
|
sudo sed -i "s/<<USER>>/${INVOKING_USER:-root}/g" "/usr/lib/sysusers.d/firezone-client-tunnel.conf"
|
|
|
|
# Creates the system group `firezone-client` and adds the group membership.
|
|
sudo systemd-sysusers
|
|
|
|
echo "Starting and enabling Firezone Tunnel service..."
|
|
sudo systemctl daemon-reload
|
|
sudo systemctl enable "$SERVICE_NAME"
|
|
sudo systemctl restart "$SERVICE_NAME"
|