Introduce INVOKING_USER.mkdir()

mkosi/__init__.py

@@ -77,7 +77,6 @@
     format_rlimit,
     make_executable,
     one_zero,
-    parents_below,
     read_env_file,
     round_up,
     scopedenv,
@@ -4223,16 +4222,7 @@ def run_build(args: Args, config: Config, *, resources: Path) -> None:
         if not p or p.exists():
             continue
 
-        p.mkdir(parents=True, exist_ok=True)
-
-        # If we created the directory in a parent directory owned by the invoking user, make sure the directories we
-        # just created are owned by the invoking user as well.
-        if (
-            INVOKING_USER.is_regular_user() and
-            (q := next((parent for parent in p.parents if parent.stat().st_uid == INVOKING_USER.uid), None))
-        ):
-            for parent in parents_below(p, q):
-                os.chown(parent, INVOKING_USER.uid, INVOKING_USER.gid)
+        INVOKING_USER.mkdir(p)
 
     # Discard setuid/setgid bits as these are inherited and can leak into the image.
     if config.build_dir:

mkosi/user.py

@@ -12,7 +12,7 @@
 
 from mkosi.log import die
 from mkosi.run import run, spawn
-from mkosi.util import flock
+from mkosi.util import flock, parents_below
 
 SUBRANGE = 65536
 
@@ -85,6 +85,21 @@ def rchown(cls, path: Path) -> None:
         if cls.is_regular_user() and any(p.stat().st_uid == cls.uid for p in path.parents) and path.exists():
             run(["chown", "--recursive", f"{INVOKING_USER.uid}:{INVOKING_USER.gid}", path])
 
+    @classmethod
+    def mkdir(cls, path: Path) -> None:
+        path.mkdir(parents=True, exist_ok=True)
+
+        # If we created the directory in a parent directory owned by the invoking user, make sure the directories we
+        # just created are owned by the invoking user as well.
+        if (
+            cls.is_regular_user() and
+            (q := next((parent for parent in path.parents if parent.stat().st_uid == cls.uid), None))
+        ):
+            os.chown(path, INVOKING_USER.uid, INVOKING_USER.gid)
+
+            for parent in parents_below(path, q):
+                os.chown(parent, INVOKING_USER.uid, INVOKING_USER.gid)
+
 
 def read_subrange(path: Path) -> int:
     uid = str(os.getuid())