From 21a9864cd7c35985a750f37b1659b742ad3fb2ad Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Sat, 4 Nov 2023 12:29:35 +0100
Subject: [PATCH] create gcroots directory for buildbot

---
 nix/worker.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/nix/worker.nix b/nix/worker.nix
index a087edf..2fdf3eb 100644
--- a/nix/worker.nix
+++ b/nix/worker.nix
@@ -32,6 +32,12 @@ in
   };
   config = lib.mkIf cfg.enable {
     nix.settings.extra-allowed-users = [ "buildbot-worker" ];
+
+    # Allow buildbot-worker to create gcroots
+    systemd.tmpfiles.rules = [
+      "d /nix/var/nix/gcroots/per-user/${config.users.users.buildbot-worker.name} 0755 ${config.users.users.buildbot-worker.name} root - -"
+    ];
+
     users.users.buildbot-worker = {
       description = "Buildbot Worker User.";
       isSystemUser = true;