@@ -68,6 +68,15 @@ if [ -z "$USER_HOME" ]; then
6868 USER_HOME="/home/${SSH_USER}"
6969fi
7070
71+run_as_user() {
72+ runuser -u "$SSH_USER" -- env HOME="$USER_HOME" "$@"
73+}
74+
75+# Ensure user cache dirs are writable (mise writes under ~/.cache/mise)
76+install -d -m 700 -o "$SSH_USER" -g "$SSH_USER" "${USER_HOME}/.cache"
77+install -d -m 700 -o "$SSH_USER" -g "$SSH_USER" "${USER_HOME}/.cache/mise"
78+chown -R "$SSH_USER:$SSH_USER" "${USER_HOME}/.cache" 2>/dev/null || true
79+
7180# Home mount links (config-driven)
7281__VIBEBOX_HOME_LINKS__
7382
@@ -89,7 +98,7 @@ fi
8998# Install Mise
9099MISE_BIN="${USER_HOME}/.local/bin/mise"
91100if [ ! -x "$MISE_BIN" ] && ! command -v mise >/dev/null 2>&1; then
92− curl https://mise.run | HOME="$USER_HOME" sh
101+ run_as_user sh -c 'curl https://mise.run | sh'
93102fi
94103echo 'eval "$(~/.local/bin/mise activate bash)"' >> "${USER_HOME}/.bashrc"
95104
@@ -113,10 +122,11 @@ MISE
113122
114123touch "${USER_HOME}/.config/mise/mise.lock"
115124if [ -x "$MISE_BIN" ]; then
116− HOME="$USER_HOME" "$MISE_BIN" install
125+ run_as_user "$MISE_BIN" install
117126else
118− HOME="$USER_HOME" mise install
127+ run_as_user mise install
119128fi
129+chown -R "$SSH_USER:$SSH_USER" "${USER_HOME}/.cache" "${USER_HOME}/.config/mise" "${USER_HOME}/.local/share/mise" 2>/dev/null || true
120130
121131# 3) start ssh (don't swallow failures)
122132# If ssh is already active, don't force start/restart.