Merge pull request 'fix: provision nixbld users for root nix install' (#42) from stage into master

Reviewed-on: #42

.gitea/workflows/kubeadm-bootstrap.yml

@@ -103,6 +103,16 @@ jobs:
             mkdir -p /nix
             chown root:root /nix
             chmod 0755 /nix
+
+            if ! getent group nixbld >/dev/null 2>&1; then
+              groupadd --system nixbld
+            fi
+
+            for i in $(seq 1 10); do
+              if ! id "nixbld$i" >/dev/null 2>&1; then
+                useradd --system --gid nixbld --no-create-home --home-dir /var/empty --shell /usr/sbin/nologin "nixbld$i"
+              fi
+            done
           fi
           sh <(curl -L https://nixos.org/nix/install) --no-daemon
 

.gitea/workflows/terraform-apply.yml

@@ -104,6 +104,16 @@ jobs:
               mkdir -p /nix
               chown root:root /nix
               chmod 0755 /nix
+
+              if ! getent group nixbld >/dev/null 2>&1; then
+                groupadd --system nixbld
+              fi
+
+              for i in $(seq 1 10); do
+                if ! id "nixbld$i" >/dev/null 2>&1; then
+                  useradd --system --gid nixbld --no-create-home --home-dir /var/empty --shell /usr/sbin/nologin "nixbld$i"
+                fi
+              done
             fi
             sh <(curl -L https://nixos.org/nix/install) --no-daemon
           fi