Switch user earlier and via shell

Author: kraenhansen

.github/workflows/test-installers.yml

@@ -85,7 +85,15 @@ jobs:
             runs-on: ubuntu-latest
             arch: x64
             hadron-platform: linux
-            test-command-prefix: sudo --user compass
+            pre-checkout-command: |
+              # Install dependencies
+              dnf install -y sudo gcc gcc-c++ make git nss dbus xorg-x11-server-Xvfb
+              # Add a non-admin sudoer user and switch to it
+              adduser compass
+              echo "compass ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
+              chmod a+rw ${{ github.workspace }}
+            # Use a shell which switch to the non-root compass user first
+            shell: bash -e -c "su - compass; source {0}"
             container:
               image: rockylinux:9
               volumes:
@@ -133,24 +141,25 @@ jobs:
 
     runs-on: ${{ matrix.runs-on }}
     container: ${{ matrix.container }}
+    defaults:
+      run:
+        shell: ${{ matrix.shell }}
     env:
       DEBUG: compass:smoketests:*
     steps:
+      - name: Run pre-checkout command
+        if: matrix.pre-checkout-command
+        run: ${{ matrix.pre-checkout-command }}
+        # Use bash shell for pre-checkout command as it might setup a user which is needed for subsequent steps
+        shell: bash
+
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: 20
           cache: "npm"
-      - name: Configure Rocky linux
-        if: matrix.container.image == 'rockylinux:9'
-        run: |
-          # Install dependencies
-          dnf install -y sudo gcc gcc-c++ make git nss dbus xorg-x11-server-Xvfb
-          # Add a non-admin sudoer user
-          adduser compass
-          echo "compass ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
 
       - name: Cache downloads
         uses: actions/cache@v4
@@ -195,4 +204,4 @@ jobs:
           # Exposing token to prevent update server from being rate limited
           GITHUB_TOKEN: ${{ github.token }}
         working-directory: packages/compass-smoke-tests
-        run: ${{ matrix.test-command-prefix }} npm start -- --package ${{ matrix.package }} --tests ${{ matrix.test }}
+        run: npm start -- --package ${{ matrix.package }} --tests ${{ matrix.test }}