fix(monorepo-gerrit): Disable 'DynamicUser' feature for Gerrit
This change makes Gerrit run as the 'git' user, which can be shared by other services such as hound or cgit to access the git trees. Change-Id: Ic6c91f3e852184f5ef21f4374738cbf687462194 Reviewed-on: https://cl.tvl.fyi/c/depot/+/21 Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: isomer <isomer@tvl.in>
This commit is contained in:
parent
ea3cab8755
commit
7875753659
1 changed files with 13 additions and 0 deletions
|
@ -33,4 +33,17 @@ in {
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
systemd.services.gerrit = {
|
||||||
|
serviceConfig = {
|
||||||
|
# There seems to be no easy way to get `DynamicUser` to play
|
||||||
|
# well with other services (e.g. by using SupplementaryGroups,
|
||||||
|
# which seem to have no effect) so we force the DynamicUser
|
||||||
|
# setting for the Gerrit service to be disabled and reuse the
|
||||||
|
# existing 'git' user.
|
||||||
|
DynamicUser = lib.mkForce false;
|
||||||
|
User = "git";
|
||||||
|
Group = "git";
|
||||||
|
};
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue