From 32c30765c71a4a93f5a450bec0411258f5b58e70 Mon Sep 17 00:00:00 2001
From: brainchild <34869175+brainchild0@users.noreply.github.com>
Date: Fri, 20 Mar 2026 17:45:39 -0400
Subject: [PATCH] Make files copied to user home from host system fully
 accessible to user

Due to a combination of factors, files copied from the host system are
not writable by the default user, and neither are directories
navigable. Notably, the owner of such files is set to the user of the
base image, not the user declared, as an override, by the derived
image.

Utilizing ACLs harmlessly corrects the disruption of usability
presently emerging in particular cases.
---
 pacstall-docker-builder | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pacstall-docker-builder b/pacstall-docker-builder
index da3012c..4bf99e6 100755
--- a/pacstall-docker-builder
+++ b/pacstall-docker-builder
@@ -320,7 +320,7 @@ RUN if [[ \$(dpkg --print-architecture) == "amd64" ]]; then \
     fi && \
     apt-get update && \
     apt-get dist-upgrade -y && \
-    apt-get install wget curl git sudo nano ca-certificates util-linux adduser -y --fix-missing --no-install-recommends && \
+    apt-get install wget curl git sudo nano ca-certificates util-linux adduser acl -y --fix-missing --no-install-recommends && \
     apt-get clean && \
     apt-get autoclean && \
     apt-get autoremove -y
@@ -328,6 +328,7 @@ RUN adduser --disabled-password --gecos '' pacstall && adduser pacstall sudo
 RUN echo N | sudo bash -c "\$(curl -fsSL https://raw.githubusercontent.com/pacstall/pacstall/${imgver}/install.sh || wget -q https://raw.githubusercontent.com/pacstall/pacstall/${imgver}/install.sh -O -)" && rm -f /var/cache/apt/archives/*.deb /var/cache/apt/archives/partial/*.deb /var/cache/apt/*.bin
 RUN echo '%sudo ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers
 RUN chown -R pacstall:pacstall /var/log/pacstall && chown -R pacstall:pacstall /tmp/pacstall
+RUN setfacl -d -m user:pacstall:rwX /home/pacstall
 RUN sudo sed -i 's/ignore_stack=false/ignore_stack=true/g' /usr/bin/pacstall
 RUN runuser -l pacstall -c "HOME=/home/pacstall SUDO_USER=pacstall pacstall -U pacstall:${imgver}"
 # https://askubuntu.com/a/1026978