create-deployment-spack.yml: Added restricted folder and set ACLs (#76)

* create-deployment-spack.yml: Added restricted folder and set ACLs * create-deployment-spack.yml: Code review suggestions Co-authored-by: Aidan Heerdegen <[email protected]> Signed-off-by: Tommy Gatti <[email protected]> --------- Signed-off-by: Tommy Gatti <[email protected]> Co-authored-by: Aidan Heerdegen <[email protected]>
ACCESS-NRI · May 16, 2024 · 1eee2ec · 1eee2ec
1 parent 6a47df3
commit 1eee2ec
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/create-deployment-spack.yml b/.github/workflows/create-deployment-spack.yml
@@ -67,4 +67,13 @@ jobs:
           git -C ${{ env.ROOT_VERSION_LOCATION }} clone https://github.com/ACCESS-NRI/spack-config.git --branch ${{ inputs.spack-config-version }}
           ln -s -r -v ${{ env.ROOT_VERSION_LOCATION }}/spack-config/v${{ steps.strip.outputs.version-dir }}/${{ vars.DEPLOYMENT_TARGET }}/* ${{ env.ROOT_VERSION_LOCATION }}/spack/etc/spack/
           mkdir ${{ env.ROOT_VERSION_LOCATION }}/release
+
+          # Create restricted folders
+          mkdir -p ${{ env.ROOT_VERSION_LOCATION }}/restricted/ukmo/release
+          mkdir -p ${{ env.ROOT_VERSION_LOCATION }}/restricted/ukmo/source_cache
+          mkdir -p $tempdir/$user/restricted/spack-stage
+
+          setfacl --recursive -m \
+            "g:vk83_w:r-X,g:ki32_mosrs:r-X,g:vk83:---,other::---,d:g:vk83_w:r-X,d:g:ki32_mosrs:r-X,d:g:vk83:---,d:other::---" \
+            ${{ env.ROOT_VERSION_LOCATION }}/restricted $tempdir/$user/restricted
           EOT