Fix node-gyp build: add PrivateTmp to lamassu-build service

This commit is contained in:
Patrick Mulligan 2026-01-11 18:31:49 +01:00
parent 4fd0a02f81
commit 501d53b238

View file

@ -270,6 +270,8 @@ in
CI = "true"; CI = "true";
CC = "${pkgs.stdenv.cc}/bin/cc"; CC = "${pkgs.stdenv.cc}/bin/cc";
CXX = "${pkgs.stdenv.cc}/bin/c++"; CXX = "${pkgs.stdenv.cc}/bin/c++";
# Use content-addressable store to reduce disk usage
npm_config_cache = "${cfg.dataDir}/.npm-cache";
}; };
serviceConfig = { serviceConfig = {
@ -285,6 +287,8 @@ in
ProtectHome = true; ProtectHome = true;
NoNewPrivileges = true; NoNewPrivileges = true;
ReadWritePaths = [ cfg.dataDir ]; ReadWritePaths = [ cfg.dataDir ];
# node-gyp needs writable /tmp for native module compilation
PrivateTmp = true;
}; };
script = '' script = ''