chexit/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(yami): tmpfiles for runner token must use root (DynamicUser has n… #6

Merged
Chexit merged 1 commits from claude/add-yami-dev-stack-zHOMn into master 2026-04-19 15:18:12 +00:00
Conversation 0 Commits 1 Files Changed 1
+3 -2
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
yami-dev-stack.nix
+3 -2
View File
@@ -142,9 +142,10 @@ in
requires = [ "gitea.service" "docker.service" ]; requires = [ "gitea.service" "docker.service" ];
}; };
# Directory for the runner token file; owner matches the runner service user. # Runner uses DynamicUser, so there's no static gitea-runner user/group.
# The token file is read by the root-run pre-start, so root owns it.
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d /var/lib/gitea-runner 0700 gitea-runner gitea-runner -" "d /var/lib/gitea-runner 0700 root root -"
]; ];
# ── Shell aliases ────────────────────────────────────────────────────────── # ── Shell aliases ──────────────────────────────────────────────────────────