2761e829cb
Some checks failed
Mark stable commit / test-unit (push) Has been cancelled
Mark stable commit / test-integration (push) Has been cancelled
Mark stable commit / test-env-virtual (push) Has been cancelled
Mark stable commit / test-env-nix (push) Has been cancelled
Mark stable commit / test-e2e (push) Has been cancelled
Mark stable commit / test-virgin-user (push) Has been cancelled
Mark stable commit / test-virgin-root (push) Has been cancelled
Mark stable commit / mark-stable (push) Has been cancelled
Introduce a dedicated publish-containers workflow triggered after stable releases. Unify container build and publish logic via scripts, add buildx-based multi-tag publishing, default base image resolution, and Arch alias tags for latest/version/stable. https://chatgpt.com/share/693c836b-0b00-800f-9536-9e273abd0fb5
50 lines
1.5 KiB
Bash
Executable File
50 lines
1.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
if [[ -n "${PKGMGR_NIX_USERS_SH:-}" ]]; then
|
|
return 0
|
|
fi
|
|
PKGMGR_NIX_USERS_SH=1
|
|
|
|
# Ensure Nix build group and users exist (build-users-group = nixbld) - root only
|
|
ensure_nix_build_group() {
|
|
if ! getent group nixbld >/dev/null 2>&1; then
|
|
echo "[init-nix] Creating group 'nixbld'..."
|
|
groupadd -r nixbld
|
|
fi
|
|
|
|
for i in $(seq 1 10); do
|
|
if ! id "nixbld$i" >/dev/null 2>&1; then
|
|
echo "[init-nix] Creating build user nixbld$i..."
|
|
useradd -r -g nixbld -G nixbld -s /usr/sbin/nologin "nixbld$i"
|
|
fi
|
|
done
|
|
}
|
|
|
|
# Container-only helper: /nix ownership + perms for single-user install as 'nix'
|
|
ensure_nix_store_dir_for_container_user() {
|
|
if [[ ! -d /nix ]]; then
|
|
echo "[init-nix] Creating /nix with owner nix:nixbld..."
|
|
mkdir -m 0755 /nix
|
|
chown nix:nixbld /nix
|
|
return 0
|
|
fi
|
|
|
|
local current_owner current_group
|
|
current_owner="$(stat -c '%U' /nix 2>/dev/null || echo '?')"
|
|
current_group="$(stat -c '%G' /nix 2>/dev/null || echo '?')"
|
|
if [[ "$current_owner" != "nix" || "$current_group" != "nixbld" ]]; then
|
|
echo "[init-nix] Fixing /nix ownership from $current_owner:$current_group to nix:nixbld..."
|
|
chown -R nix:nixbld /nix
|
|
fi
|
|
}
|
|
|
|
# Container-only helper: make nix profile executable/traversable for non-root
|
|
ensure_container_profile_perms() {
|
|
if [[ -d /home/nix ]]; then
|
|
chmod o+rx /home/nix 2>/dev/null || true
|
|
fi
|
|
if [[ -d /home/nix/.nix-profile ]]; then
|
|
chmod -R o+rx /home/nix/.nix-profile 2>/dev/null || true
|
|
fi
|
|
}
|