diff --git a/image.nix b/image.nix index 9736a4d..7cc6798 100644 --- a/image.nix +++ b/image.nix @@ -20,7 +20,9 @@ pkgs.dockerTools.buildLayeredImage { (pkgs.writeShellScriptBin "reload-dotfiles" '' ${pkgs.home-manager}/bin/home-manager switch --flake ''${DOTFILES_REPO:-$1} '') - (pkgs.writeTextDir "etc/nix/nix.conf" "experimental-features = nix-command flakes") + (pkgs.writeTextDir "etc/nix/nix.conf" '' + experimental-features = nix-command flakes + '') (pkgs.writeTextDir "etc/passwd" "coder:x:1000:1000::/home/coder:/bin/bash") (pkgs.writeTextDir "etc/shadow" "coder:!:::::::") (pkgs.writeTextDir "etc/group" "coder:x:1000:") @@ -30,11 +32,17 @@ pkgs.dockerTools.buildLayeredImage { }; maxLayers = 5; + uid = 1000; + gid = 1000; fakeRootCommands = '' - mkdir -p ./home/coder ./tmp ./nix/var/nix + mkdir -p /home/coder /tmp /nix/var/nix + chown -R 1000:1000 / ''; + enableFakechroot = true; + config = { Cmd = ["/bin/bash"]; + User = "1000:1000"; Env = [ "SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt" "HOME=/home/coder"