nixos: deactivate immutablity for /var/empty in container

2019-09-13 17:33:38 +02:00
parent ba37b3c622
commit db9b5f5525
2 changed files with 9 additions and 0 deletions
@@ -184,7 +184,14 @@ in
        find /var/empty -mindepth 1 -delete
        chmod 0555 /var/empty
        chown root:root /var/empty
+
+        ${ # reasons for not setting immutable flag:
+           # 1. flag is not changeable inside a container
+           # 2. systemd-nspawn can not perform chown in case of --private-users-chown
+           #    then the owner is nobody and ssh will not start
+          optionalString (!config.boot.isContainer) ''
        ${pkgs.e2fsprogs}/bin/chattr -f +i /var/empty || true
+          ''}
      '';

    system.activationScripts.usrbinenv = if config.environment.usrbinenv != null