DockerWrapper.wrap(): run as config.runtime.uid instead of root

wrapper_su_helper.py

@@ -0,0 +1,37 @@
+#!/bin/python3
+
+import click
+import os
+import pwd
+
+from logger import logging, setup_logging
+
+from exec.cmd import run_cmd
+from exec.file import chown
+
+
+@click.command('kupferbootstrap_su')
+@click.option('--username', default='kupfer', help="The user's name. If --uid is provided, the user's uid will be changed to this in passwd")
+@click.option('--uid', default=1000, type=int, help='uid to change $username to and run as')
+@click.argument('cmd', type=str, nargs=-1)
+def kupferbootstrap_su(cmd: list[str], uid: int = 1000, username: str = 'kupfer'):
+    "Changes `username`'s uid to `uid` and executes kupferbootstrap as that user"
+    cmd = list(cmd)
+    user = pwd.getpwnam(username)
+    home = user.pw_dir
+    if uid != user.pw_uid:
+        run_cmd(['usermod', '-u', str(uid), username]).check_returncode()  # type: ignore[union-attr]
+        chown(home, username, recursive=False)
+    env = os.environ | {
+        'HOME': home,
+        'USER': username,
+    }
+    logging.debug(f'wrapper: running {cmd} as {repr(username)}')
+    result = run_cmd(cmd, attach_tty=True, switch_user=username, env=env)
+    assert isinstance(result, int)
+    exit(result)
+
+
+if __name__ == '__main__':
+    setup_logging(True)
+    kupferbootstrap_su(prog_name='kupferbootstrap_su_helper')