From 885679705164fdba72f796903179a4d2aa1f9dc0 Mon Sep 17 00:00:00 2001 From: nyxerinys Date: Tue, 30 Jun 2026 10:46:06 -0500 Subject: [PATCH] run as root --- modules/k3s/deployments/storage-combo.nix | 6 ++---- modules/k3s/images/rsshfs-client.nix | 2 +- 2 files changed, 3 insertions(+), 5 deletions(-) diff --git a/modules/k3s/deployments/storage-combo.nix b/modules/k3s/deployments/storage-combo.nix index 6505a2d..b8cb41b 100644 --- a/modules/k3s/deployments/storage-combo.nix +++ b/modules/k3s/deployments/storage-combo.nix @@ -15,10 +15,6 @@ labels.app = "storage-combo"; }; spec = { - securityContext = { - runAsUser = 1000; - runAsGroup = 1000; - }; containers = [ { name = "storage-combo"; @@ -39,6 +35,8 @@ securityContext = { capabilities.add = ["SYS_ADMIN"]; privileged = true; + runAsUser = 0; + runAsGroup = 0; }; } ]; diff --git a/modules/k3s/images/rsshfs-client.nix b/modules/k3s/images/rsshfs-client.nix index 86199e2..dcfad2f 100644 --- a/modules/k3s/images/rsshfs-client.nix +++ b/modules/k3s/images/rsshfs-client.nix @@ -76,7 +76,7 @@ let echo "[ Reverse port opened on $PORT ]" echo "[ Pushing local $LFolder to the remote $RFolder ]" $SSHCMD null "if [[ ! -d $RFolder ]]; then mkdir -p $RFolder; fi" - $SSHCMD null "sshfs -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -p $PORT localhost:$LFolder $RFolder" + $SSHCMD null "sshfs -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -p $PORT localhost:$LFolder $RFolder -o uid=1000 -o gid=1000 -o allow_other" pause