fix(yami): tmpfiles for runner token must use root (DynamicUser has no static user)

2026-04-19 18:17:24 +03:00
parent 6a2fb0970c
commit ecf8b5974a
1 changed files with 3 additions and 2 deletions
@@ -142,9 +142,10 @@ in
      requires = [ "gitea.service" "docker.service" ];
    };

-    # Directory for the runner token file; owner matches the runner service user.
+    # Runner uses DynamicUser, so there's no static gitea-runner user/group.
+    # The token file is read by the root-run pre-start, so root owns it.
    systemd.tmpfiles.rules = [
-      "d /var/lib/gitea-runner 0700 gitea-runner gitea-runner -"
+      "d /var/lib/gitea-runner 0700 root root -"
    ];

    # ── Shell aliases ──────────────────────────────────────────────────────────