Add user to docker group if not superuser

[NeilW]

This allows docker commands to function with a non-root ssh user

Fixes: #980

[NeilW]

Finished in 562.249692s, 0.9124 runs/s, 3.2939 assertions/s.
513 runs, 1852 assertions, 0 failures, 0 errors, 0 skips

[dhh]

I thought any group changes requires we logout/back-in or maybe even restart the server? We had that issue with Omakub.

[NeilW]

Finished in 597.636880s, 0.8617 runs/s, 3.1909 assertions/s. 515 runs, 1907 assertions, 0 failures, 0 errors, 0 skips

[NeilW]

Thanks for the comment @dhh

I've updated the fix and it should now work with kamal setup as well as kamal server bootstrap.

I've created a kamal container for anybody who wants to test this version with their configuration.

alias kamal='docker run -it --rm -v "${PWD}:/workdir" --network=host -v "${SSH_AUTH_SOCK}:/ssh-agent" -v /var/run/docker.sock:/var/run/docker.sock -e "SSH_AUTH_SOCK=/ssh-agent" cr.brightbox.com/acc-tqs4c/docker/kamal:latest'

Please give it a go and flag up any issues.

[NeilW]

Update to reduce the ferocity of the session termination. Now only terminates the initiating kamal session.

[dhh]

Hmm, starting to think that we're probably better off failing fast and telling the user to do this themselves with clear instructions.

[NeilW]

If you don’t like the kill then the original change is fine in the bootstrap since kamal disconnects.

Then the next time kamal is run, all is well.

What’s the issue you are seeing?

[NeilW]

Turns out a HUP signal does work with sshd when it's the session lead allowing it to clean up properly.

[kdiogenes]

I thought any group changes requires we logout/back-in or maybe even restart the server? We had that issue with Omakub.

The newgrp command can be used to load the new group during a session: https://linux.die.net/man/1/newgrp

[NeilW]

I've added the -n option to the sudo call and altered the superuser? check so that it checks sudo can at least call the usermod command. That should be a better proxy for whether sudo can complete the task than the previous iteration.

I've removed the su test in superuser? since that isn't going to be useful. Far better to be opinionated and require sudo if root isn't directly available.

If sudo cannot be called without a password or hasn't sufficient privileges to run the usermod command we then get the manual install error message

Ensure Docker is installed...
  INFO [e4cd943d] Running docker -v on ipv6.srv-qaket.gb1s.brightbox.com
  INFO [320089ed] Running docker -v on ipv6.srv-m9ng9.gb1s.brightbox.com
  INFO [320089ed] Finished in 0.068 seconds with exit status 127 (failed).
  INFO [558dfcd8] Running [ "${EUID:-$(id -u)}" -eq 0 ] || sudo -nl usermod >/dev/null on ipv6.srv-m9ng9.gb1s.brightbox.com
  INFO [e4cd943d] Finished in 0.118 seconds with exit status 127 (failed).
  INFO [f421ab33] Running [ "${EUID:-$(id -u)}" -eq 0 ] || sudo -nl usermod >/dev/null on ipv6.srv-qaket.gb1s.brightbox.com
  INFO [558dfcd8] Finished in 0.131 seconds with exit status 1 (failed).
  INFO [f421ab33] Finished in 0.128 seconds with exit status 1 (failed).
Releasing the deploy lock...
  Finished all in 2.0 seconds
  ERROR (RuntimeError): Docker is not installed on ipv6.srv-m9ng9.gb1s.brightbox.com, ipv6.srv-qaket.gb1s.brightbox.com and can't be automatically installed without having root access and either `wget` or `curl`. Install Docker manually: https://docs.docker.com/engine/install/

[NeilW]

The docker image above has been updated for anybody who wants to test out the new iteration