blumeops/docs/changelog.d/+homepage-config-perms-fix.bugfix.md

Fixed homepage container EACCES on cold start: the nix-built image now chowns
`/app/config` to uid 1000 at build time via `fakeRootCommands`, matching the
behavior of the old Dockerfile. Without this, homepage couldn't seed missing
skeleton configs (proxmox.yaml etc.) or create `/app/config/logs`, crashing on
its first uncached request. Caught during the ringtail cutover.
C0: fix homepage container /app/config write permissions The previous Dockerfile chowned /app/config to 1000:1000 so the runtime user could seed missing skeleton configs (e.g. proxmox.yaml) and write /app/config/logs. The nix derivation didn't replicate that, so the new amd64 image crashed with EACCES on cold start (fixed-forward — caught during ringtail cutover, ArgoCD #348). Add fakeRootCommands to dockerTools to create /app and /app/config and chown them at build time. The deployment's ConfigMap subPath mounts leave the parent directory as image filesystem, so its ownership has to be set at build time, not at runtime. 2026-05-10 20:48:48 -07:00			`Fixed homepage container EACCES on cold start: the nix-built image now chowns`
			`/app/config` to uid 1000 at build time via `fakeRootCommands`, matching the
			`behavior of the old Dockerfile. Without this, homepage couldn't seed missing`
			skeleton configs (proxmox.yaml etc.) or create `/app/config/logs`, crashing on
			`its first uncached request. Caught during the ringtail cutover.`