Nix / NixOS

1765 readers

8 users here now

Main links

Videos

founded 1 year ago

MODERATORS

ballmerpeaking@programming.dev

WhiteBlackGoose@programming.dev

erlingur@programming.dev

How to set file permissions with home-manager? (programming.dev)

submitted 7 months ago by secana@programming.dev to c/nix@programming.dev

3 comments fedilink hide all child comments

Hi! I ran into the issue that my kube config, which I manage with home-manager is world read- and writable. I hoped that there is an easy option to set file permissions with home-manager, e.g. home.file."foo".permissions = 0644 but something like this does not exist. All solutions a short web search turns up are overly complicated for something that seems to be a trivial task.

What is the easiest way to set permissions for a file with home-manager?

you are viewing a single comment's thread
view the rest of the comments

[–] c0d3g33k@lemmy.world 2 points 6 months ago

I use/abuse "systemd.user.tmpfiles.rules" to ensure important files and folders are present with the desired permissions. These are "for creation, deletion and cleaning of volatile and temporary files automatically", but from what I can tell, if you don't specify values for cleanup etc. then they are just created if they don't exist, permissions adjusted if they do and they are otherwise left alone. See the manpage tmpfiles.d(5) for the exact format.

The config looks something like this:

systemd.user.tmpfiles.rules = [
      "d /home/username/path/to/directory 0750 username groupname - -"
      "f /home/username/path/to/file.ext 0700 username groupname - -"
];`___`

where username and groupname are replaced with the actual values for the user being home-managed.