Skip to content

fix(rallly,spliit): postgres のデータディレクトリを uid 70 所有にする #396

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gapul merged 1 commit into from
Aug 21, 2026
Merged

fix(rallly,spliit): postgres のデータディレクトリを uid 70 所有にする #396

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion nix/homelab/rallly.nix
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,8 +24,12 @@
# (podman の userns root) 所有なので、その下に root 所有のディレクトリを作った
# 後さらに中へ降りると systemd が unsafe path transition で拒否する。calnode で
# 実際に踏んだ (詳細は calnode.nix)。なので db 用は入れ子にせず並べる。
#
# 所有者が root ではなく 70 なのは、postgres のイメージが uid 70 で動くため。
# root 所有の 0700 だと `mkdir: can't create directory '/var/lib/postgresql/18/':
# Permission denied` で起動に失敗する。既存の miniflux/db も uid 70 所有だった。
systemd.tmpfiles.rules = [
"d /var/lib/homelab/rallly-db 0700 root root -"
"d /var/lib/homelab/rallly-db 0700 70 70 -"
];

virtualisation.oci-containers.containers."rallly" = {
Expand Down
6 changes: 5 additions & 1 deletion nix/homelab/spliit.nix
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,8 +15,12 @@
{
# rallly.nix と同じ理由で1階層。/var/lib/homelab の下に入れ子を作ろうとすると
# tmpfiles が unsafe path transition で拒否する (calnode.nix 参照)。
#
# 所有者が root ではなく 70 なのは、postgres のイメージが uid 70 で動くため。
# root 所有の 0700 だと `mkdir: can't create directory '/var/lib/postgresql/18/':
# Permission denied` で起動に失敗する。既存の miniflux/db も uid 70 所有。
systemd.tmpfiles.rules = [
"d /var/lib/homelab/spliit-db 0700 root root -"
"d /var/lib/homelab/spliit-db 0700 70 70 -"
];

virtualisation.oci-containers.containers."spliit" = {
Expand Down
Loading