vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

agents: chown work/ recursively only on owner mismatch

Browse source
This commit is contained in:
atlas 2026-10-05 13:01:14 +02:00
commit 8e0597d41d
2 changed files with 8 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nix/module-eval/agent-user.nix
View file

@ -30,7 +30,9 @@ let
# hive-c0re creates the host work dir as hive-core; this activation is
# the only thing that lets the agent write to it.
name = "the agent's activation hands its own work dir to the agent user";
ok = lib.hasInfix ''chown -hR "$userName:$userName" "/agents/$userName/work"'' migrate;
ok =
lib.hasInfix ''if [ "$(stat -c %U "/agents/$userName/work")" != "$userName" ]; then'' migrate
&& lib.hasInfix ''chown -hR "$userName:$userName" "/agents/$userName/work"'' migrate;
}
{
# hive-priv creates the host socket dir `0751 root` and never chowns it,