colonelpanic/dotfiles
1
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[NixOS] Fix permissions

Browse Source
This commit is contained in:
Ivan Malison 2024-10-07 15:12:41 -06:00
parent c25cd05b15
commit 8e1abde359
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
nixos/k3s.nix
View File

@ -42,13 +42,14 @@ in {
RemainAfterExit = true; RemainAfterExit = true;
# ExecStartPre runs as root (the default), to perform the setup steps # ExecStartPre runs as root (the default), to perform the setup steps
ExecStartPre = [ ExecStartPre = [
"-${pkgs.util-linux}/bin/umount -f ${mount-path}" "-${pkgs.util-linux}/bin/umount -f ${mount-path}" # Ensure unmount if already mounted
"${pkgs.coreutils}/bin/mkdir -p ${mount-path}" "${pkgs.coreutils}/bin/mkdir -p ${mount-path}" # Create the mount point
"${pkgs.coreutils}/bin/chown -R railbird ${mount-path}" "${pkgs.coreutils}/bin/chown railbird:users ${mount-path}" # Ensure the directory is owned by railbird and group users
"${pkgs.coreutils}/bin/chmod 0777 ${mount-path}" "${pkgs.coreutils}/bin/chmod 0775 ${mount-path}" # Give read/write/execute to owner and group, and read/execute to others
]; ];
# Use su to run the main command as the railbird user # Mount the GCS bucket
ExecStart = "${pkgs.gcsfuse}/bin/gcsfuse --implicit-dirs --key-file ${config.age.secrets.api-service-key.path} ${bucket-name} ${mount-path}"; ExecStart = "${pkgs.gcsfuse}/bin/gcsfuse --implicit-dirs --key-file ${config.age.secrets.api-service-key.path} --uid $(id -u railbird) --gid $(id -g users) ${bucket-name} ${mount-path}";
User = "root"; # Needs to run as root for mounting
}; };
}; };