From a8c505e7f38ab26eadaad2f940b6b778e6224beb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Micha=C5=82?= <ash8820@proton.me>
Date: Fri, 21 Aug 2026 22:16:09 +0200
Subject: [PATCH] ci: make builder user creation idempotent for host-mode
 runner

---
 .gitea/workflows/build.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index e846dd1..ec37cfa 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -30,8 +30,9 @@ jobs:
 
     - name: Create builder user
       run: |
-        useradd -m builder
-        echo "builder ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
+        id -u builder &>/dev/null || useradd -m builder
+        echo "builder ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/builder
+        chmod 440 /etc/sudoers.d/builder
 
     - name: Build packages
       run: python build-packages.py