chexit/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(yami): tmpfiles for runner token must use root (DynamicUser has no static user)

Browse Source
This commit is contained in:
chexit
2026-04-19 18:17:24 +03:00
parent 6a2fb0970c
commit ecf8b5974a
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
yami-dev-stack.nix
+3 -2
View File
@@ -142,9 +142,10 @@ in
requires = [ "gitea.service" "docker.service" ]; requires = [ "gitea.service" "docker.service" ];
}; };
# Directory for the runner token file; owner matches the runner service user. # Runner uses DynamicUser, so there's no static gitea-runner user/group.
# The token file is read by the root-run pre-start, so root owns it.
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d /var/lib/gitea-runner 0700 gitea-runner gitea-runner -" "d /var/lib/gitea-runner 0700 root root -"
]; ];
# ── Shell aliases ────────────────────────────────────────────────────────── # ── Shell aliases ──────────────────────────────────────────────────────────