Run devenv as root on start/sys

gbraad · Jan 11, 2025 · 4d8bc64 · 4d8bc64
1 parent cf67906
commit 4d8bc64
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/.github/workflows/tailscale-ssh.yml b/.github/workflows/tailscale-ssh.yml
@@ -9,9 +9,9 @@ jobs:
     steps:
       - name: Remove unwanted stuff
         uses: gbraad-devenv/remove-unwanted@v1
-      - name: Run system container with `podman` and `-user root`
+      - name: Run system container with `podman` and `--user root`
         run: |
-          podman run -d --name dotfiles --hostname code-${HOSTNAME} --systemd=always --cap-add=NET_RAW --cap-add=NET_ADMIN --cap-add=SYS_ADMIN --device=/dev/net/tun --device=/dev/fuse -u root ghcr.io/gbraad/dotfiles:latest
+          podman run -d --name dotfiles --hostname code-${HOSTNAME} --systemd=always --cap-add=NET_RAW --cap-add=NET_ADMIN --cap-add=SYS_ADMIN --device=/dev/net/tun --device=/dev/fuse --user root --entrypoint /sbin/init ghcr.io/gbraad/dotfiles:latest
       - name: Tailscale setup (root)
         run: |
           podman exec dotfiles systemctl enable --now tailscaled

diff --git a/zsh/.zshrc.d/devenv.zsh b/zsh/.zshrc.d/devenv.zsh
@@ -15,6 +15,7 @@ dev() {
 
   local START_SHELL=$(devini --get devenv.shell)
   local START_ARGS=(
+    "--user=root"
     "--systemd=always"
     "--cap-add=NET_RAW"
     "--cap-add=NET_ADMIN"