eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions
blumeops/docs/changelog.d/+homepage-config-perms-fix.bugfix.md
Erich Blume 678f26b0e7 C0: fix homepage container /app/config write permissions 
The previous Dockerfile chowned /app/config to 1000:1000 so the runtime
user could seed missing skeleton configs (e.g. proxmox.yaml) and write
/app/config/logs. The nix derivation didn't replicate that, so the new
amd64 image crashed with EACCES on cold start (fixed-forward — caught
during ringtail cutover, ArgoCD #348).

Add fakeRootCommands to dockerTools to create /app and /app/config and
chown them at build time. The deployment's ConfigMap subPath mounts
leave the parent directory as image filesystem, so its ownership has to
be set at build time, not at runtime.
2026-05-10 20:49:22 -07:00

375 B
Raw Blame History

Fixed homepage container EACCES on cold start: the nix-built image now chowns /app/config to uid 1000 at build time via fakeRootCommands, matching the behavior of the old Dockerfile. Without this, homepage couldn't seed missing skeleton configs (proxmox.yaml etc.) or create /app/config/logs, crashing on its first uncached request. Caught during the ringtail cutover.