Use nix to check if running as root

Other way to use libc directly

Author: dilawar

crates/cli/Cargo.toml

@@ -19,7 +19,9 @@ dialoguer = "0.11"
 libloading = "0.8"
 cargo_metadata = "0.20"
 semver = "1.0"
-elevate = "0.6.1"
+
+[target.'cfg(unix)'.dependencies]
+nix = { version = "0.30", features=["user"]}
 
 [lints.rust]
 missing_docs = "warn"

crates/cli/src/lib.rs

@@ -198,9 +198,10 @@ impl Install {
             self.no_default_features,
         )?;
 
+        #[cfg(unix)]
         if !self.bypass_root_check {
             anyhow::ensure!(
-                elevate::check() == elevate::RunningAs::User,
+                ! is_root(),
                 "Running as root is not recommended. Use --bypass-root-check to override."
             );
         }
@@ -246,10 +247,10 @@ impl Install {
     }
 }
 
-// Update extension information in the ini file, if fails, try with sudo again.
+// Update extension line in the ini file.
 //
-// Write to a temp file then move it to given path. Use `sudo` on unix to move
-// file if needed.
+// Write to a temp file then copy it to a given path. If this fails, then try `sudo mv` 
+// on unix.
 fn update_ini_file(php_ini: &PathBuf, ext_name: &str, disable: bool) -> anyhow::Result<()> {
     let current_ini_content = std::fs::read_to_string(php_ini)?;
     let mut ext_line = format!("extension={ext_name}");
@@ -267,6 +268,7 @@ fn update_ini_file(php_ini: &PathBuf, ext_name: &str, disable: bool) -> anyhow::
     }
 
     new_lines.push(&ext_line);
+
     write_to_file(new_lines.join("\n"), php_ini)?;
     Ok(())
 }
@@ -275,17 +277,20 @@ fn update_ini_file(php_ini: &PathBuf, ext_name: &str, disable: bool) -> anyhow::
 //
 // Checking if we have write permission for ext_dir may fail due to ACL, group
 // list and and other nuances. See
-// https://doc.rust-lang.org/std/fs/struct.Permissions.html#method.readonly
+// https://doc.rust-lang.org/std/fs/struct.Permissions.html#method.readonly. 
 fn copy_extension(ext_path: &Utf8PathBuf, ext_dir: &PathBuf) -> anyhow::Result<()> {
     if let Err(_e) = std::fs::copy(ext_path, ext_dir) {
         #[cfg(unix)]
         {
-            let _ = std::process::Command::new("sudo")
+            let s = std::process::Command::new("sudo")
                 .arg("cp")
                 .arg(ext_path)
                 .arg(ext_dir)
                 .status()?;
+            anyhow::ensure!(s.success(), "Failed to copy extension");
         }
+        #[cfg(not(unix))]
+        anyhow::bail!("Failed to copy extension: {_e}");
     }
     Ok(())
 }
@@ -599,28 +604,26 @@ fn build_ext(
     bail!("Failed to retrieve extension path from artifact")
 }
 
-// Write given string to a given filepath.
+// Write content to a given filepath.
 //
-// - Write to a temp file first.
-// - Copy the temp file to the given filepath.
-// - If it fails, move tempfile using `sudo mv`.
-//
-// TODO: Try with sudo when error is permission related.
+// We may not have write permission but we may have sudo privilege on unix. So we write to 
+// a temp file and then try moving it to given filepath, and retry with sudo on unix.
 fn write_to_file(content: String, filepath: &PathBuf) -> anyhow::Result<()> {
     // write to a temp file
     let tempf = std::env::temp_dir().join("__tmp_cargo_php");
     std::fs::write(&tempf, content)?;
 
-    // Now move. `rename` will overwrite existing file.
+    // Now try moving, `rename` will overwrite existing file.
     if std::fs::rename(&tempf, filepath).is_err() {
         #[cfg(unix)]
         {
             // if not successful, try with sudo on unix.
-            let _ = std::process::Command::new("sudo")
+            let s = std::process::Command::new("sudo")
                 .arg("mv")
                 .arg(&tempf)
                 .arg(filepath)
                 .status()?;
+            anyhow::ensure!(s.success(), "Falied to write to {filepath:?}");
         }
 
         #[cfg(not(unix))]
@@ -629,3 +632,9 @@ fn write_to_file(content: String, filepath: &PathBuf) -> anyhow::Result<()> {
 
     Ok(())
 }
+
+#[cfg(unix)]
+fn is_root() -> bool 
+{
+    nix::unistd::Uid::effective().is_root()
+}