mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00
Code Activity

chore: switch to nixseparatedebuginfod branch with allowUsers fix

Browse source
This commit is contained in:
oddlama 2023-10-02 12:21:40 +02:00
parent 070a92468e
commit 4fba5b5255
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
2 changed files with 6 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

2
flake.nix
View file

@ -68,7 +68,7 @@
}; };
nixseparatedebuginfod = { nixseparatedebuginfod = {
url = "github:symphorien/nixseparatedebuginfod"; url = "github:symphorien/nixseparatedebuginfod/466110a37e11a33a3551b44d9da5e323a8924cfa";
inputs.nixpkgs.follows = "nixpkgs"; inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-utils.follows = "flake-utils"; inputs.flake-utils.follows = "flake-utils";
}; };

17
modules/optional/dev/default.nix
View file

@ -18,21 +18,10 @@ lib.optionalAttrs (!minimal) {
# Add the agenix-rekey sandbox path permanently to avoid adding myself to trusted-users # Add the agenix-rekey sandbox path permanently to avoid adding myself to trusted-users
nix.settings.extra-sandbox-paths = ["/var/tmp/agenix-rekey"]; nix.settings.extra-sandbox-paths = ["/var/tmp/agenix-rekey"];
services.nixseparatedebuginfod.enable = true; services.nixseparatedebuginfod = {
enable = true;
# We need a system-level user to be able to use nix.settings.allowed-users with it. # We need a system-level user to be able to use nix.settings.allowed-users with it.
# TODO: remove once https://github.com/NixOS/nix/issues/9071 is fixed # TODO: remove once https://github.com/NixOS/nix/issues/9071 is fixed
systemd.services.nixseparatedebuginfod.serviceConfig = { allowUser = true;
DynamicUser = lib.mkForce false;
User = "nixseparatedebuginfod";
Group = "nixseparatedebuginfod";
PrivateTmp = true;
}; };
users = {
groups.nixseparatedebuginfod = {};
users.nixseparatedebuginfod = {
description = "nixseparatedebuginfod user";
group = "nixseparatedebuginfod";
};
};
nix.settings.allowed-users = ["nixseparatedebuginfod"];
} }