NixOS-based container for running GitHub actions
more permission fixes
+7
-6
+7
-6
flake.nix
+7
-6
flake.nix
···
417
417
418
418
mkdir -p $out/bin $out/usr/bin
419
419
ln -s ${pkgs.coreutils}/bin/env $out/usr/bin/env
420
-
ln -s ${pkgs.bashInteractive}/bin/bash $out/bin/sh
420
+
# ln -s ${pkgs.bashInteractive}/bin/bash $out/bin/sh
421
421
'';
422
422
in
423
423
pkgs.dockerTools.buildLayeredImageWithNixDb {
···
442
442
rm -f etc/group
443
443
cp "$tmp" etc/group
444
444
'';
445
+
enableFakechroot = true;
445
446
fakeRootCommands = ''
446
-
chmod u=rws,g=rw,o=rw bin/sudo
447
-
chmod u=rws,g=rw,o=rw bin/nix
448
-
chmod u=rwxt,u=rwx,o=rwx tmp
449
-
chmod u=rwxt,u=rwx,o=rwx var/tmp
450
-
chown -R 1001:1001 github
447
+
chmod u=rwxt,u=rwx,o=rwx /tmp
448
+
chmod u=rwxt,u=rwx,o=rwx /var/tmp
449
+
chown -R 1001:1001 /github
450
+
chmod u=rws,g=rw,o=rw ${lib.getExe pkgs.sudo}
451
+
chmod u=rws,g=rw,o=rw ${lib.getExe pkgs.nix}
451
452
'';
452
453
config = {
453
454
Cmd = [ "${pkgs.bashInteractive}/bin/bash" ];