Could not set permissions on '/nix/var/nix/profiles/per-user' to 755: Operation not permitted

[mausch]

Given this dockerfile:

FROM codercom/code-server:4.18.0
RUN curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix/tag/v0.15.1 | sh -s -- install linux --init none --no-confirm
ENV PATH="$PATH:/nix/var/nix/profiles/default/bin"

$ docker build -t pp - < Dockerfile
$ docker run --rm -it --entrypoint /bin/bash pp
coder$ nix run nixpkgs#hello
error: could not set permissions on '/nix/var/nix/profiles/per-user' to 755: Operation not permitted

Maybe related to #418

Also /nix/var/nix/profiles/per-user already has permission 755 , it seems the installer could check before attempting to change it?

The official installer works fine here:

        FROM codercom/code-server:4.18.0

        USER root
        RUN apt update && apt install -y xz-utils
        RUN mkdir -p /etc/nix
        RUN echo "experimental-features = nix-command flakes" >> /etc/nix/nix.conf
        USER 1000

        RUN curl -L https://nixos.org/releases/nix/nix-2.19.1/install -o install-nix && chmod a+x install-nix && \
          ./install-nix --no-daemon --no-channel-add \
          && rm install-nix

        ENV HOME="/home/coder"
        ENV PATH="$PATH:$HOME/.nix-profile/bin:$HOME/.nix-profile/bin/nix"

[Hoverbear]

This error is coming from Nix (not the installer) trying to change the permissions. The folder likely already has those permissions because the installer created them with those permissions.

You're runing the installer with --init none, so the caveats from https://github.com/DeterminateSystems/nix-installer#without-systemd-linux-only apply:

sudo -i nix run nixpkgs#hello

[tgunnoe]

is this the same story with macOS? I have the same error after installing the macOS version on an EC2 machine.

[mausch]

Hmm, I thought this installer should work wherever the official installer also worked?
It would be great if I could just use the DetSys installer everywhere without needing to fall back to the official installer in special cases.

[cole-h]

Your mac woes sound very similar to #742. It might be worth it to peruse the discussion there.