ensure coder user can write to /nix

ghuntley · ghuntley · commit 7984ed7d64b5 · 2022-12-22T07:04:50.000Z
diff --git a/dogfood/Dockerfile b/dogfood/Dockerfile
@@ -313,9 +313,11 @@ COPY --from=rust-utils /tmp/bin /usr/local/bin
 COPY --from=proto /tmp/bin /usr/local/bin
 
 # Configure Nix without sandboxing - https://github.com/NixOS/nix/issues/2636#issuecomment-455302745
-RUN mkdir -p /nix /etc/nix && \
-    chmod a+rwx /nix && \
-    echo 'sandbox = false' > /etc/nix/nix.conf
+RUN addgroup --system nixbld \
+  && adduser coder nixbld \
+  && for i in $(seq 1 30); do useradd -ms /bin/bash nixbld$i &&  adduser nixbld$i nixbld; done \
+  && mkdir -m 0755 /nix && chown coder /nix \
+  && mkdir -p /etc/nix && echo 'sandbox = false' > /etc/nix/nix.conf
 
 USER coder
 
