idk

Dockerfile

@@ -17,14 +17,10 @@ WORKDIR /app
 
 RUN apk add --no-cache libwebp libstdc++
 
-RUN adduser -D -g '' appuser
-
 COPY --from=builder /app/quay .
 
 RUN mkdir -p /storage /config && \
-    chown -R appuser:appuser /app /storage /config
-
-USER appuser
+    chmod -R 755 /storage /config
 
 ENV PORT=4321
 ENV CONFIG_DIR=/config

app/github/github.go

@@ -35,7 +35,9 @@ func FetchAndDeployBranch(repoOwner, repoName, branch, pat, destDir string) erro
 		return fmt.Errorf("GitHub returned %s for %s", resp.Status, archiveURL)
 	}
 
-	tmpZip, err := os.CreateTemp("", "ghbranch-*.zip")
+	storageRoot := filepath.Dir(destDir)
+
+	tmpZip, err := os.CreateTemp(storageRoot, "ghbranch-*.zip")
 	if err != nil {
 		return fmt.Errorf("creating temp zip: %w", err)
 	}
@@ -47,7 +49,7 @@ func FetchAndDeployBranch(repoOwner, repoName, branch, pat, destDir string) erro
 	}
 	tmpZip.Close()
 
-	tmpDir, err := os.MkdirTemp("", "ghbranch-unpack-*")
+	tmpDir, err := os.MkdirTemp(storageRoot, "ghbranch-unpack-*")
 	if err != nil {
 		return fmt.Errorf("creating temp dir: %w", err)
 	}