max / makenotwork

mnw-cli: drop /opt/git from unit ReadWritePaths Soak cleanup removed /opt/git/ (git serving moved to /var/lib/mnw/git/), which is covered by /var/lib/mnw. The stale path caused 226/NAMESPACE on restart after the fhs-git-path.conf drop-in was removed. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: Max Johnson <me@maxj.phd> · 2026-06-04 02:04 UTC

Commit: d9147a332328ffd67f3890bdf20628726693dcd1

Parent: a3bc35f

1 file changed, +1 insertion, -1 deletion

M mnw-cli/deploy/mnw-cli.service +1 -1

			@@ -24,7 +24,7 @@ NoNewPrivileges=false
24	24		ProtectSystem=strict
25	25		ProtectHome=true
26	26		PrivateTmp=true
27		-	ReadWritePaths=/opt/mnw-cli /var/lib/mnw-cli /opt/git /var/lib/mnw
	27	+	ReadWritePaths=/opt/mnw-cli /var/lib/mnw-cli /var/lib/mnw
28	28		RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
29	29		RestrictNamespaces=true
30	30		RestrictRealtime=true