fix(image): set ownership of most image contents to 1000:1000 to fix permission issues

This commit is contained in:
technofab 2024-05-07 00:48:23 +02:00
parent 67f5115048
commit 058e2f73e8

View file

@ -20,7 +20,9 @@ pkgs.dockerTools.buildLayeredImage {
(pkgs.writeShellScriptBin "reload-dotfiles" '' (pkgs.writeShellScriptBin "reload-dotfiles" ''
${pkgs.home-manager}/bin/home-manager switch --flake ''${DOTFILES_REPO:-$1} ${pkgs.home-manager}/bin/home-manager switch --flake ''${DOTFILES_REPO:-$1}
'') '')
(pkgs.writeTextDir "etc/nix/nix.conf" "experimental-features = nix-command flakes") (pkgs.writeTextDir "etc/nix/nix.conf" ''
experimental-features = nix-command flakes
'')
(pkgs.writeTextDir "etc/passwd" "coder:x:1000:1000::/home/coder:/bin/bash") (pkgs.writeTextDir "etc/passwd" "coder:x:1000:1000::/home/coder:/bin/bash")
(pkgs.writeTextDir "etc/shadow" "coder:!:::::::") (pkgs.writeTextDir "etc/shadow" "coder:!:::::::")
(pkgs.writeTextDir "etc/group" "coder:x:1000:") (pkgs.writeTextDir "etc/group" "coder:x:1000:")
@ -30,11 +32,17 @@ pkgs.dockerTools.buildLayeredImage {
}; };
maxLayers = 5; maxLayers = 5;
uid = 1000;
gid = 1000;
fakeRootCommands = '' fakeRootCommands = ''
mkdir -p ./home/coder ./tmp ./nix/var/nix mkdir -p /home/coder /tmp /nix/var/nix
chown -R 1000:1000 /
''; '';
enableFakechroot = true;
config = { config = {
Cmd = ["/bin/bash"]; Cmd = ["/bin/bash"];
User = "1000:1000";
Env = [ Env = [
"SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt" "SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
"HOME=/home/coder" "HOME=/home/coder"