fix: make cargo registry world-writable in sandbox container

The sqlx-cli install populates /opt/cargo/registry as root. Add
chmod -R a+rwX after the install so the sandbox user can write
to the registry when building.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
centdix
2026-02-21 18:50:02 +00:00
parent a4b440a20d
commit ed1a655317
+2 -1
View File
@@ -43,7 +43,8 @@ RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | \
# Install sqlx-cli (for database migrations)
RUN cargo install sqlx-cli --no-default-features --features native-tls,postgres && \
ln -sf /opt/cargo/bin/sqlx /usr/local/bin/sqlx
ln -sf /opt/cargo/bin/sqlx /usr/local/bin/sqlx && \
chmod -R a+rwX /opt/cargo
# Embed network init script (sets up iptables firewall, then drops privileges)
RUN cat <<'SCRIPT' > /usr/local/bin/network-init.sh