pls

binhost.sh

@@ -92,11 +92,12 @@ init_container() {
     echo "Running setup..."
     podman exec "$CONTAINER_NAME" bash -c "
         mkdir -p /root/.gnupg
-        chmod 755 /root/.gnupg
         echo 'allow-loopback-pinentry' > /root/.gnupg/gpg-agent.conf
         gpg-connect-agent reloadagent /bye
         gpg --batch --import /tmp/signing.key
         gpg --export | gpg --homedir /etc/portage/gnupg --import
+        chmod 755 /etc/portage/gnupg
+        chmod 755 /root/.gnupg
         if [[ ! -d /var/db/repos/gentoo/profiles ]]; then
             emerge-webrsync -q
         fi

binhost/make.conf

@@ -23,7 +23,7 @@ VIDEO_CARDS="intel nouveau"
 
 # "buildpkg" = generate binary packages upon install
 # "binpkg-multi-instance" = keep only latest version, but support slotting
-FEATURES="${FEATURES} -getbinpkg buildpkg binpkg-multi-instance -ipc-sandbox -network-sandbox -pid-sandbox binpkg-signing"
+FEATURES="${FEATURES} -getbinpkg buildpkg binpkg-multi-instance -ipc-sandbox -network-sandbox -pid-sandbox -userpriv binpkg-signing"
 ACCEPT_LICENSE="*"
 
 BINPKG_FORMAT="gpkg"