Function addCurrentUserToGroup

pkgcache/cache_setup.go:620–643

addCurrentUserToGroup adds the invoking user to the celer group. Under sudo this is SUDO_USER; otherwise it falls back to USER. usermod -aG is idempotent: adding an already-member user is a no-op.

(groupName string)

// Under sudo this is SUDO_USER; otherwise it falls back to USER.
// usermod -aG is idempotent: adding an already-member user is a no-op.
func addCurrentUserToGroup(groupName string) error {
	currentUser, err := currentUserForGroup()
	if err != nil {
		return err
	}

	if output, err := cmd.NewExecutor("", "usermod", "-aG", groupName, currentUser).ExecuteOutput(); err != nil {
		return fmt.Errorf("failed to add %q to %q group -> %s -> %w", currentUser, groupName, output, err)
	}

	// Verify the membership actually took effect. usermod can return 0 without
	// writing to /etc/group when the user record comes from a non-files NSS
	// source (LDAP/SSSD/etc.), in which case the group add is silently a no-op.
	groups, err := cmd.NewExecutor("", "id", "-nG", currentUser).ExecuteOutput()
	if err != nil {
		return fmt.Errorf("failed to verify groups for %q after usermod -> %w", currentUser, err)
	}
	if !slices.Contains(strings.Fields(groups), groupName) {
		return fmt.Errorf("usermod succeeded but %q is not in group %q (user likely from LDAP/SSSD, not /etc/group)", currentUser, groupName)
	}

	color.PrintHint("✔ %s is added to group %s. 💡 run `newgrp %s` or log out and log back in to take effect (opening a new terminal in the same session is NOT enough).", currentUser, groupName, groupName)
	return nil
}

// parseNFSClientDir parses the --nfs-client-dir flag value.
// Expected format: <mount_point>@<server>:<export_path>