mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-08-26 08:01:38 +00:00
fix: make cargo registry world-writable in sandbox container
The sqlx-cli install populates /opt/cargo/registry as root. Add chmod -R a+rwX after the install so the sandbox user can write to the registry when building. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
+2
-1
@@ -43,7 +43,8 @@ RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | \
|
||||
|
||||
# Install sqlx-cli (for database migrations)
|
||||
RUN cargo install sqlx-cli --no-default-features --features native-tls,postgres && \
|
||||
ln -sf /opt/cargo/bin/sqlx /usr/local/bin/sqlx
|
||||
ln -sf /opt/cargo/bin/sqlx /usr/local/bin/sqlx && \
|
||||
chmod -R a+rwX /opt/cargo
|
||||
|
||||
# Embed network init script (sets up iptables firewall, then drops privileges)
|
||||
RUN cat <<'SCRIPT' > /usr/local/bin/network-init.sh
|
||||
|
||||
Reference in New Issue
Block a user