Fix build deb rpm packages (#6309)

.cspell.json

@@ -141,6 +141,7 @@
     "nixpkgs",
     "nocolor",
     "nolint",
+    "nologin",
     "norunningpipelines",
     "nosniff",
     "ntfy",

Makefile

@@ -334,7 +334,7 @@ release-checksums: ## Create checksums for all release files
 release: release-frontend release-server release-agent release-cli ## Release all binaries
 
 bundle-prepare: ## Prepare the bundles
-	go install github.com/goreleaser/nfpm/v2/cmd/nfpm@v2.6.0
+	CGO_ENABLED=0 go install github.com/goreleaser/nfpm/v2/cmd/nfpm@v2.45.0
 
 bundle-agent: bundle-prepare ## Create bundles for agent
 	VERSION_NUMBER=$(VERSION_NUMBER) nfpm package --config ./nfpm/agent.yaml --target ${DIST_DIR} --packager deb

nfpm/agent.yaml

@@ -7,6 +7,8 @@ homepage: https://woodpecker-ci.org/
 license: Apache 2.0
 maintainer: Woodpecker Authors <maintainer@woodpecker-ci.org>
 section: daemon/system
+scripts:
+  preinstall: ./nfpm/woodpecker-system-user.preinstall.sh
 contents:
   - src: ./dist/agent/linux_amd64/woodpecker-agent
     dst: /usr/local/bin/woodpecker-agent
@@ -19,3 +21,4 @@ contents:
     file_info:
       owner: woodpecker
       group: woodpecker
+      mode: 0750

nfpm/server.yaml

@@ -7,6 +7,8 @@ homepage: https://woodpecker-ci.org/
 license: Apache 2.0
 maintainer: Woodpecker Authors <maintainer@woodpecker-ci.org>
 section: daemon/system
+scripts:
+  preinstall: ./nfpm/woodpecker-system-user.preinstall.sh
 contents:
   - src: ./dist/server/linux_amd64/woodpecker-server
     dst: /usr/local/bin/woodpecker-server
@@ -19,3 +21,4 @@ contents:
     file_info:
       owner: woodpecker
       group: woodpecker
+      mode: 0750

nfpm/woodpecker-system-user.preinstall.sh

@@ -0,0 +1,18 @@
+#!/bin/sh
+set -e
+
+# Create woodpecker group if it doesn't exist
+if ! getent group woodpecker > /dev/null 2>&1; then
+    groupadd --system woodpecker
+fi
+
+# Create woodpecker user if it doesn't exist
+if ! getent passwd woodpecker > /dev/null 2>&1; then
+    useradd \
+        --system \
+        --gid woodpecker \
+        --no-create-home \
+        --home-dir /var/lib/woodpecker \
+        --shell /sbin/nologin \
+        woodpecker
+fi