diff --git a/modules/k3s/deployments/storage-combo.nix b/modules/k3s/deployments/storage-combo.nix index 6505a2d..b8cb41b 100644 --- a/modules/k3s/deployments/storage-combo.nix +++ b/modules/k3s/deployments/storage-combo.nix @@ -15,10 +15,6 @@ labels.app = "storage-combo"; }; spec = { - securityContext = { - runAsUser = 1000; - runAsGroup = 1000; - }; containers = [ { name = "storage-combo"; @@ -39,6 +35,8 @@ securityContext = { capabilities.add = ["SYS_ADMIN"]; privileged = true; + runAsUser = 0; + runAsGroup = 0; }; } ]; diff --git a/modules/k3s/images/rsshfs-client.nix b/modules/k3s/images/rsshfs-client.nix index 86199e2..dcfad2f 100644 --- a/modules/k3s/images/rsshfs-client.nix +++ b/modules/k3s/images/rsshfs-client.nix @@ -76,7 +76,7 @@ let echo "[ Reverse port opened on $PORT ]" echo "[ Pushing local $LFolder to the remote $RFolder ]" $SSHCMD null "if [[ ! -d $RFolder ]]; then mkdir -p $RFolder; fi" - $SSHCMD null "sshfs -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -p $PORT localhost:$LFolder $RFolder" + $SSHCMD null "sshfs -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -p $PORT localhost:$LFolder $RFolder -o uid=1000 -o gid=1000 -o allow_other" pause