about summary refs log tree commit diff
diff options
context:
space:
mode:
authorWilliam Carroll <wpcarro@gmail.com>2020-08-17T20·22+0100
committerWilliam Carroll <wpcarro@gmail.com>2020-08-20T10·26+0100
commit51ec9e0d88b15276ec0891f932f6b572d6450809 (patch)
treed8972bc70f1b6f473405a761be13a32644e271da
parent79904056afc7025d3d351bc44741de4a9f20e017 (diff)
Move /home/wpcarro/nixpkgs-channels to /var/lib
My builds are still failing. This time with...
```
error: getting status of /home/wpcarro/nixpkgs-channels: Permission denied
```
...what confused me was the following:

```shell
$ sudo -u buildkite-agent-socrates stat /home/wpcarro/nixpkgs-channels
permission denied
```

But `ls -al /home/wpcarro | grep nixpkgs-channels` showed `r-w` for all users...

Thankfully @riking on ##tvl told me that I should check the permissions for
/home/wpcarro and /home...

After running `ls -al /home`, I saw `---` for all user... I then reproduced the
error by running:

```shell
$ sudo -u buildkite-agent-socrates stat /home
permission denied
```

Great!

So then I moved nixpkgs-channels to /var/lib/buildkite-agent-socrates. @edef
recommended that I read more about DynamicUser= setting for systemd, which looks
relevant after I took a cursory glance.

I'll also want a more declarative way to manager this, but I'm making small
improvements every day.
-rw-r--r--ci/scripts/build-briefcase.sh2
-rw-r--r--ci/scripts/build-socrates.sh2
2 files changed, 2 insertions, 2 deletions
diff --git a/ci/scripts/build-briefcase.sh b/ci/scripts/build-briefcase.sh
index dfe8286502d5..a754022775f7 100644
--- a/ci/scripts/build-briefcase.sh
+++ b/ci/scripts/build-briefcase.sh
@@ -2,5 +2,5 @@ set -euo pipefail
 
 nix-build . \
   -I briefcase="$(pwd)" \
-  -I nixpkgs=/home/wpcarro/nixpkgs-channel \
+  -I nixpkgs=/var/lib/buildkite-agent-socrates/nixpkgs-channels \
   --show-trace
diff --git a/ci/scripts/build-socrates.sh b/ci/scripts/build-socrates.sh
index 721fbdf57892..e7b550ea7d28 100644
--- a/ci/scripts/build-socrates.sh
+++ b/ci/scripts/build-socrates.sh
@@ -2,7 +2,7 @@ set -euo pipefail
 
 nix-build '<nixpkgs/nixos>' \
   -I briefcase="$(pwd)" \
-  -I nixpkgs=/home/wpcarro/nixpkgs-channels \
+  -I nixpkgs=/var/lib/buildkite-agent-socrates/nixpkgs-channels \
   -I nixos-config=nixos/socrates/default.nix \
   -A system \
   --show-trace