nixops: disable mutableUsers

This commit is contained in:
Sebastien Bourdeauducq 2020-06-17 12:24:17 +08:00
parent a676854640
commit 7ac26d6348
3 changed files with 6 additions and 4 deletions

View File

@ -111,6 +111,7 @@ in
programs.fish.promptInit = '' programs.fish.promptInit = ''
fish-nix-shell --info-right | source fish-nix-shell --info-right | source
''; '';
users.mutableUsers = false;
users.defaultUserShell = pkgs.fish; users.defaultUserShell = pkgs.fish;
users.extraGroups.plugdev = { }; users.extraGroups.plugdev = { };
users.extraUsers = (import ./common-users.nix); users.extraUsers = (import ./common-users.nix);

View File

@ -93,6 +93,7 @@
programs.fish.promptInit = '' programs.fish.promptInit = ''
fish-nix-shell --info-right | source fish-nix-shell --info-right | source
''; '';
users.mutableUsers = false;
users.defaultUserShell = pkgs.fish; users.defaultUserShell = pkgs.fish;
users.extraGroups.plugdev = { }; users.extraGroups.plugdev = { };
users.extraUsers = (import ./common-users.nix); users.extraUsers = (import ./common-users.nix);

View File

@ -39,15 +39,15 @@ in
networking.hostName = host; networking.hostName = host;
time.timeZone = "Asia/Hong_Kong"; time.timeZone = "Asia/Hong_Kong";
programs.wireshark.enable = true;
users.extraGroups.plugdev = { }; users.extraGroups.plugdev = { };
security.sudo.wheelNeedsPassword = false; users.mutableUsers = false;
users.defaultUserShell = pkgs.fish;
users.extraUsers = (import ./common-users.nix) // { users.extraUsers = (import ./common-users.nix) // {
nix = { nix = {
isNormalUser = true; isNormalUser = true;
}; };
}; };
security.sudo.wheelNeedsPassword = false;
services.udev.packages = [ m-labs.openocd ]; services.udev.packages = [ m-labs.openocd ];
documentation.enable = false; documentation.enable = false;
@ -55,7 +55,7 @@ in
psmisc wget vim git usbutils lm_sensors file telnet mosh tmux xc3sprog m-labs.openocd screen gdb minicom picocom psmisc wget vim git usbutils lm_sensors file telnet mosh tmux xc3sprog m-labs.openocd screen gdb minicom picocom
]; ];
programs.fish.enable = true; programs.fish.enable = true;
users.defaultUserShell = pkgs.fish; programs.wireshark.enable = true;
nix.binaryCachePublicKeys = ["nixbld.m-labs.hk-1:5aSRVA5b320xbNvu30tqxVPXpld73bhtOeH6uAjRyHc="]; nix.binaryCachePublicKeys = ["nixbld.m-labs.hk-1:5aSRVA5b320xbNvu30tqxVPXpld73bhtOeH6uAjRyHc="];
nix.binaryCaches = ["https://cache.nixos.org" "https://nixbld.m-labs.hk"]; nix.binaryCaches = ["https://cache.nixos.org" "https://nixbld.m-labs.hk"];