feat: run agent as non-root user

Author: angristan

openrc-service.sh

@@ -5,6 +5,7 @@ description="CodeBench agent"
 supervisor="supervise-daemon"
 command="/usr/local/bin/agent"
 pidfile="/run/agent.pid"
+command_user="codebench:codebench"
 
 depend() {
 	after net

setup-alpine.sh

@@ -17,6 +17,8 @@ echo "root:root" | chpasswd
 
 echo "nameserver 1.1.1.1" >>/etc/resolv.conf
 
+addgroup -g 1000 -S codebench && adduser -u 1000 -S codebench -G codebench
+
 rc-update add devfs boot
 rc-update add procfs boot
 rc-update add sysfs boot