Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

acl: run mkdir, skip /

Browse Source
This commit is contained in:
lassulus 2022-05-28 12:19:51 +02:00
parent d9fe5d4629
commit 3c2e24df1c
1 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
krebs/3modules/acl.nix
View File

@ -1,7 +1,7 @@
{ config, lib, pkgs, ... }: let
parents = dir:
if dir == "/" then
[ dir ]
[]
else
[ dir ] ++ parents (builtins.dirOf dir)
;
@ -40,13 +40,16 @@ in {
pkgs.coreutils
];
serviceConfig = {
ExecStart = pkgs.writers.writeDash "acl" (lib.concatStrings (
ExecStart = pkgs.writers.writeDash "acl" ''
mkdir -p "${path}"
${lib.concatStrings (
lib.mapAttrsToList (_: rule: ''
setfacl -${lib.optionalString rule.recursive "R"}m ${rule.rule} ${path}
${lib.optionalString rule.default "setfacl -${lib.optionalString rule.recursive "R"}dm ${rule.rule} ${path}"}
${lib.optionalString rule.parents (lib.concatMapStringsSep "\n" (folder: "setfacl -m ${rule.rule} ${folder}") (parents path))}
${lib.optionalString rule.parents (lib.concatMapStringsSep "\n" (folder: "setfacl -m ${rule.rule} ${folder}") (parents (builtins.dirOf path)))}
'') rules
));
)}
'';
RemainAfterExit = true;
Type = "simple";
};