sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: switch to nixseparatedebuginfod branch with allowUsers fix

Browse source
This commit is contained in:
oddlama 2023-10-02 12:21:40 +02:00
parent 070a92468e
commit 4fba5b5255
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
2 changed files with 6 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

2
flake.nix
View file

@ -68,7 +68,7 @@
};
nixseparatedebuginfod = {
url = "github:symphorien/nixseparatedebuginfod";
url = "github:symphorien/nixseparatedebuginfod/466110a37e11a33a3551b44d9da5e323a8924cfa";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-utils.follows = "flake-utils";
};

21
modules/optional/dev/default.nix
View file

@ -18,21 +18,10 @@ lib.optionalAttrs (!minimal) {
# Add the agenix-rekey sandbox path permanently to avoid adding myself to trusted-users
nix.settings.extra-sandbox-paths = ["/var/tmp/agenix-rekey"];
services.nixseparatedebuginfod.enable = true;
# We need a system-level user to be able to use nix.settings.allowed-users with it.
# TODO: remove once https://github.com/NixOS/nix/issues/9071 is fixed
systemd.services.nixseparatedebuginfod.serviceConfig = {
DynamicUser = lib.mkForce false;
User = "nixseparatedebuginfod";
Group = "nixseparatedebuginfod";
PrivateTmp = true;
services.nixseparatedebuginfod = {
enable = true;
# We need a system-level user to be able to use nix.settings.allowed-users with it.
# TODO: remove once https://github.com/NixOS/nix/issues/9071 is fixed
allowUser = true;
};
users = {
groups.nixseparatedebuginfod = {};
users.nixseparatedebuginfod = {
description = "nixseparatedebuginfod user";
group = "nixseparatedebuginfod";
};
};
nix.settings.allowed-users = ["nixseparatedebuginfod"];
}