feat: remove secproc group and copy start.sh separately

.bin/create-home-tarball.sh

@@ -14,5 +14,5 @@ replace_home() {
 find .config -type d -exec chmod g+x {} +
 
 replace_home "$PWD" "/home/devuser"
-tar -czf home.tar.gz --owner root:0 --group secproc:1002 --xform "s,$PWD,/home/devuser," .config .local .ssh start.sh
+tar --mode=a=r,u+w,a+x -czf home.tar.gz --owner root:0 --group root:0 --xform "s,$PWD,/home/devuser," .config .local .ssh
 replace_home "/home/devuser" "$PWD"

.ssh/config

@@ -1,7 +1,6 @@
 Host alps
     HostName 10.88.0.1
     User git
-    IdentityFile ~/.ssh/id_ed25519
     IdentitiesOnly yes
     StrictHostKeyChecking yes
     Port 2222
@@ -10,7 +9,6 @@ Host alps
 Host github
     HostName github.com
     User git
-    IdentityFile ~/.ssh/id_ed25519
     IdentitiesOnly yes
     StrictHostKeyChecking yes
     ProxyCommand none

.vscode/tasks.json

@@ -56,6 +56,14 @@
       "problemMatcher": [],
       "detail": "Copy gitconfig.template to $HOME/"
     },
+    {
+      "label": "GitOps(Update): start.sh",
+      "type": "shell",
+      "command": ".bin/gitops update start.sh",
+      "group": "build",
+      "problemMatcher": [],
+      "detail": "Copy start.sh to $HOME/"
+    },
     {
       "label": "Create home tarball",
       "type": "shell",

Containerfile

@@ -19,8 +19,7 @@ RUN pacman -Sy --noconfirm && \
 
 # Create user/groups as per your script, with -l to avoid system user quirks
 RUN groupadd -g $DEV_GID $DEV_USER && \
-  groupadd -g 2000 secproc && \
-  useradd -l -ms /bin/fish -G secproc -u $DEV_UID -g $DEV_GID $DEV_USER
+  useradd -l -ms /bin/fish -u $DEV_UID -g $DEV_GID $DEV_USER
 
 # ────────────────────────
 # Stage 2: Workspace Image
@@ -36,6 +35,7 @@ ARG POD_UID=1002
 
 # Use ADD for extracting archives
 ADD home.tar.gz $DEV_HOME
+COPY --chmod=755 start.sh $DEV_HOME/
 
 # Prepare .ssh and known_hosts, and fix permissions only if dirs exist
 RUN mkdir -p $DEV_HOME/.ssh && \