liminix

commit c7e18c193b543c4d09a642a6a263a7fe74baee07
parent cf115867ed52c0c73918e54e9aa55cb4b18e9d85
Author: Daniel Barlow <dan@telent.net>
Date:   Sat,  3 Oct 2026 23:18:57 +0100

gateway: set o+r on resolvconf outout so dnsmasq can see it

dnsmasq needs read permission on resolv.conf _and_ on the directory
it lives in, because it sets up an inotify watch there

Diffstat:
M
modules/profiles/gateway.nix
 | 
1
+

1 file changed, 1 insertion(+), 0 deletions(-)
diff --git a/modules/profiles/gateway.nix b/modules/profiles/gateway.nix
@@ -178,6 +178,7 @@ in
       name = "resolvconf";
       up = ''
         ( in_outputs ${name}
+         chmod 0755 . # dnsmasq user needs this directory to be readable
          echo "nameserver $(output ${config.services.wan} ns1)" > resolv.conf
          echo "nameserver $(output ${config.services.wan} ns2)" >> resolv.conf
          chmod 0444 resolv.conf