Fixes for stable systems

2025-11-19 19:41:34 -08:00
parent 0b8e3bf527
commit 4f6d65316a
4 changed files with 43 additions and 18 deletions
--- a/roles/remote-build/default.nix
+++ b/roles/remote-build/default.nix
@@ -91,6 +91,11 @@ in

      users.groups.${cfg.builderUser} = {};

+      # Ensure home directory has correct permissions
+      systemd.tmpfiles.rules = [
+        "d /var/lib/${cfg.builderUser} 0700 ${cfg.builderUser} ${cfg.builderUser} -"
+      ];
+
      # Allow builder user to perform builds
      nix.settings.trusted-users = [ cfg.builderUser ];