mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 15:20:39 +02:00
Code Activity

fix: make user for nixseparatedebuginfod to allow it to use the nix-daemon

Browse source
This commit is contained in:
oddlama 2023-09-29 17:28:37 +02:00
parent 7b9cc4172a
commit fe21c0030c
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
2 changed files with 15 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/config/users.nix
View file

@ -25,5 +25,6 @@
rtkit = uidGid 984;
gitea = uidGid 983;
redis-paperless = uidGid 982;
nixseparatedebuginfod = uidGid 981;
};
}

14
modules/optional/dev/default.nix
View file

@ -19,5 +19,19 @@ lib.optionalAttrs (!minimal) {
nix.settings.extra-sandbox-paths = ["/var/tmp/agenix-rekey"];
services.nixseparatedebuginfod.enable = true;
# We need a system-level user to be able to use nix.settings.allowed-users with it.
# TODO: remove once https://github.com/NixOS/nix/issues/9071 is fixed
systemd.services.nixseparatedebuginfod.serviceConfig = {
DynamicUser = lib.mkForce false;
User = "nixseparatedebuginfod";
Group = "nixseparatedebuginfod";
};
users = {
groups.nixseparatedebuginfod = {};
users.nixseparatedebuginfod = {
description = "nixseparatedebuginfod user";
group = "nixseparatedebuginfod";
};
};
nix.settings.allowed-users = ["nixseparatedebuginfod"];
}