Webstar/LibrePortal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge claude/1

Browse Source
This commit is contained in:
librelad 2026-05-26 21:56:43 +01:00
commit 10dc7d0bc0
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
scripts/docker/command/run_privileged.sh
View File

@ -82,8 +82,13 @@ runInstallWrite() {
# password and BORG_/RESTIC_/KOPIA_ env vars reach the tool. Never root — the # password and BORG_/RESTIC_/KOPIA_ env vars reach the tool. Never root — the
# scoped sudoers lets the manager drop to this user. Single funnel so the # scoped sudoers lets the manager drop to this user. Single funnel so the
# backup subsystem's privilege drop has one audit point. # backup subsystem's privilege drop has one audit point.
# -H resets HOME to the target user's so restic finds (or creates) its cache
# under /home/$docker_install_user/.cache/restic instead of inheriting the
# manager's HOME (which dockerinstall can't write into, surfacing as
# "unable to open cache: mkdir /home/libreportal/.cache/restic: permission denied"
# on every backup).
runBackupOp() { runBackupOp() {
sudo -E -u "$docker_install_user" "$@" sudo -E -H -u "$docker_install_user" "$@"
} }
# Run one of the ROOT-OWNED LibrePortal helpers installed (root:root 0755) under # Run one of the ROOT-OWNED LibrePortal helpers installed (root:root 0755) under