harivansh-afk/nix
1
1
Fork 0
mirror of https://github.com/harivansh-afk/nix.git synced 2026-04-20 20:01:13 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

ci(netty): disable NoNewPrivileges on runner so sudo works for deploy
Some checks failed
quality / changes (push) Successful in 1s
Details
quality / Nix Format Check (push) Successful in 5s
Details
quality / Flake Check (push) Successful in 13s
Details
quality / Deploy netty (push) Failing after 1s
Details

Browse source 
Made-with: Cursor
This commit is contained in:
Harivansh Rathi 2026-04-18 22:48:37 -04:00
parent a1f22bd7b4
commit bac6f96814
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hosts/netty/forgejo-runner.nix
View file

@ -8,6 +8,10 @@ let
cacheRoot = "/var/cache/forgejo-runner"; cacheRoot = "/var/cache/forgejo-runner";
in in
{ {
systemd.services.gitea-runner-netty.serviceConfig = {
NoNewPrivileges = lib.mkForce false;
};
security.sudo.extraRules = [ security.sudo.extraRules = [
{ {
users = [ "gitea-runner" ]; users = [ "gitea-runner" ];