From a2882a7722d5560060c35f40d3e4c9d6a864b66a Mon Sep 17 00:00:00 2001
From: root <root@lyon.remote>
Date: Fri, 12 Jun 2026 19:55:04 +0000
Subject: [PATCH] fix: set writable home for publish step

---
 scripts/gitops-render.mjs | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/scripts/gitops-render.mjs b/scripts/gitops-render.mjs
index 7bf320da..9a00e0eb 100644
--- a/scripts/gitops-render.mjs
+++ b/scripts/gitops-render.mjs
@@ -1705,6 +1705,8 @@ export HWLAB_TIMING_SERVICE_ID="$(params.service-id)"
 ${dependencyProxyProbeScript("service-image-publish-proxy-preflight", "http://deb.debian.org/debian/dists/bookworm/InRelease")}
 echo '{"event":"ci-base-image","phase":"service-image-publish","serviceId":"'"$(params.service-id)"'","image":"${ciToolsRunnerImage}","policy":"no-runtime-apk"}'
 for tool in node npm git python3 ssh curl; do command -v "$tool" >/dev/null 2>&1 || { echo '{"event":"ci-base-image","phase":"service-image-publish","ok":false,"reason":"missing-tool","tool":"'"$tool"'"}'; exit 31; }; done
+mkdir -p /workspace/service-work/home
+export HOME=/workspace/service-work/home
 git config --global --add safe.directory /workspace/source/repo
 cd /workspace/source/repo
 test "$(git rev-parse HEAD)" = "$(params.revision)"