Felitendo
ceb024d7be
A root systemd service applies pacman, AUR, Flatpak and AppImage updates on its own, gated on battery state, gaming activity and whether anybody else is using the package system. The CLI is deliberately two switches plus status. No user password is stored anywhere: pacman runs as root directly, and the AUR step - which makepkg forbids running as root - drops to a locked system account that sudoers permits to call pacman without a password.
16 lines
847 B
Plaintext
16 lines
847 B
Plaintext
# Type Path Mode UID GID Age Argument
|
|
|
|
# State the CLI reads unprivileged (`cachy-auto-update status`).
|
|
d /var/lib/cachy-auto-update 0755 root root - -
|
|
|
|
# Home of the build account. Everything the AUR helper clones and compiles
|
|
# stays in here instead of in somebody's home directory.
|
|
d /var/lib/cachy-auto-update/builder 0700 cachy-auto-update cachy-auto-update - -
|
|
d /var/cache/cachy-auto-update 0700 cachy-auto-update cachy-auto-update - -
|
|
|
|
# Logs, matching pacman's own world-readable convention so `log` works without
|
|
# root.
|
|
d /var/log/cachy-auto-update 0755 root root - -
|
|
|
|
d /run/cachy-auto-update 0755 root root - -
|