summaryrefslogtreecommitdiff
path: root/modules/services/github-runner
diff options
context:
space:
mode:
authorMichael Hoang <Enzime@users.noreply.github.com>2024-11-07 07:16:23 +0000
committerGitHub <noreply@github.com>2024-11-07 07:16:23 +0000
commit158198a6e3690facf15718b24571789c0756d43a (patch)
treedb0037d066e035f655a37cfeae348705d2f95cc5 /modules/services/github-runner
parent366b99abfe07ebc0ab56f68b126394344cab00f5 (diff)
parent79608947e27163a2e74b1bec0812ce7a942cbdb8 (diff)
Merge pull request #1139 from Enzime/push-ssqvumruwtmy
system: run `shellcheck` on `activate` and `activate-user` scripts
Diffstat (limited to 'modules/services/github-runner')
-rw-r--r--modules/services/github-runner/service.nix22
1 files changed, 14 insertions, 8 deletions
diff --git a/modules/services/github-runner/service.nix b/modules/services/github-runner/service.nix
index 175b22d..c273f43 100644
--- a/modules/services/github-runner/service.nix
+++ b/modules/services/github-runner/service.nix
@@ -48,14 +48,20 @@ in
text = mkBefore (''
echo >&2 "setting up GitHub Runner '${cfg.name}'..."
- ${pkgs.coreutils}/bin/mkdir -p -m 0750 ${escapeShellArg (mkStateDir cfg)}
- ${pkgs.coreutils}/bin/chown ${user}:${group} ${escapeShellArg (mkStateDir cfg)}
-
- ${pkgs.coreutils}/bin/mkdir -p -m 0750 ${escapeShellArg (mkLogDir cfg)}
- ${pkgs.coreutils}/bin/chown ${user}:${group} ${escapeShellArg (mkLogDir cfg)}
- '' + optionalString (cfg.workDir == null) ''
- ${pkgs.coreutils}/bin/mkdir -p -m 0750 ${escapeShellArg (mkWorkDir cfg)}
- ${pkgs.coreutils}/bin/chown ${user}:${group} ${escapeShellArg (mkWorkDir cfg)}
+ (
+ umask -S u=rwx,g=rx,o=
+
+ ${pkgs.coreutils}/bin/mkdir -p ${escapeShellArg (mkStateDir cfg)}
+ ${pkgs.coreutils}/bin/chown ${user}:${group} ${escapeShellArg (mkStateDir cfg)}
+
+ ${pkgs.coreutils}/bin/mkdir -p ${escapeShellArg (mkLogDir cfg)}
+ ${pkgs.coreutils}/bin/chown ${user}:${group} ${escapeShellArg (mkLogDir cfg)}
+
+ ${optionalString (cfg.workDir == null) ''
+ ${pkgs.coreutils}/bin/mkdir -p ${escapeShellArg (mkWorkDir cfg)}
+ ${pkgs.coreutils}/bin/chown ${user}:${group} ${escapeShellArg (mkWorkDir cfg)}
+ ''}
+ )
'');
};
}));