Explicitly set HOME for containers

Podman sets this automatically to the working directory (and even extends
/etc/passwd). We make it explicit here and also allow to change it
(helpful to mount some specific folders into the home directory, e.g.,
credentials).

cfg/cfg.go

@@ -46,6 +46,7 @@ type ToolConfig struct {
 	ImageName    string
 	ImageTag     ImageTagConfig
 	WorkDir      string
+	HomeDir      string
 	Command      CommandConfig
 	Mounts       []MountConfig
 	Env          []EnvConfig

cmd/generate.go

@@ -62,6 +62,7 @@ var generateCmd = &cobra.Command{
 					ImageName:    toolConfig.ImageName,
 					ImageTag:     toolConfig.ImageTag,
 					WorkDir:      toolConfig.WorkDir,
+					HomeDir:      toolConfig.HomeDir,
 					Command:      toolConfig.Command,
 					Mounts:       toolConfig.Mounts,
 					Env:          toolConfig.Env,

cmd/root.go

@@ -106,6 +106,9 @@ func initConfig() {
 		if toolConfig.WorkDir == "" {
 			toolConfig.WorkDir = "/work"
 		}
+		if toolConfig.HomeDir == "" {
+			toolConfig.HomeDir = "/home/container"
+		}
 		if !toolConfig.Command.Type.IsDoNotSpecify() && !toolConfig.Command.Type.IsReuseName() {
 			toolConfig.Command.Type = cfg.DoNotSpecify
 		}

example/ccliwrapper.yaml

@@ -14,7 +14,7 @@ tools:
       type: DoNotSpecify
     mounts:
       - source: $HOME/.aws
-        target: /root/.aws
+        target: /home/container/.aws
 
   go:
     type: WrapperScript
@@ -108,7 +108,7 @@ tools:
       type: DoNotSpecify
     mounts:
       - source: $HOME/.kube
-        target: /.kube
+        target: /home/container/.kube
     customScript: |-
       # implement simple caching for "kubectl completion" commands so that this can be used
       # in e.g. .bashrc without a big performance impact
@@ -140,11 +140,11 @@ tools:
       type: DoNotSpecify
     mounts:
       - source: $HOME/.kube
-        target: /root/.kube
+        target: /home/container/.kube
       - source: $HOME/.config/helm
-        target: /root/.config/helm
+        target: /home/container/.config/helm
       - source: $HOME/.cache/helm
-        target: /root/.cache/helm
+        target: /home/container/.cache/helm
     customScript: |-
       # implement simple caching for "helm completion" commands so that this can be used
       # in e.g. .bashrc without a big performance impact

gen/gen.go

@@ -17,6 +17,7 @@ type ToolParams struct {
 	ImageName    string
 	ImageTag     cfg.ImageTagConfig
 	WorkDir      string
+	HomeDir      string
 	Command      cfg.CommandConfig
 	Mounts       []cfg.MountConfig
 	Env          []cfg.EnvConfig

tpl/wrapperscript.gotpl

@@ -36,6 +36,10 @@ declare -a additional_params=(
   {{- range .Mounts }}
   -v '{{ .Source }}:{{ .Target }}'
   {{- end }}
+  {{- if ne .HomeDir .WorkDir }}
+  --tmpfs '{{ .HomeDir }}'
+  {{- end }}
+  -e 'HOME={{ .HomeDir }}'
   {{- range .Env }}
   -e '{{ .Name }}={{ .Value }}'
   {{- end }}