···146146 # Create the tss user and group only if the default value is used
147147 users.users.${cfg.tssUser} = lib.mkIf (cfg.tssUser == "tss") {
148148 isSystemUser = true;
149149+ group = "tss";
149150 };
150151 users.groups.${cfg.tssGroup} = lib.mkIf (cfg.tssGroup == "tss") {};
151152···172173 BusName = "com.intel.tss2.Tabrmd";
173174 ExecStart = "${cfg.abrmd.package}/bin/tpm2-abrmd";
174175 User = "tss";
175175- Group = "nogroup";
176176+ Group = "tss";
176177 };
177178 };
178179
···105105 </term>
106106 <listitem>
107107 <para>
108108- AppCenter has been available since 20.03, but it is of little use. This is because there is no functioning PackageKit backend for Nix 2.0. In the near future you will be able to install Flatpak applications from AppCenter on NixOS. See this <link xlink:href="https://github.com/NixOS/nixpkgs/issues/70214">issue</link>.
108108+ AppCenter has been available since 20.03, but it is of little use. This is because there is no functioning PackageKit backend for Nix 2.0. Starting from 21.11, the Flatpak backend should work so you can install some Flatpak applications using it. See this <link xlink:href="https://github.com/NixOS/nixpkgs/issues/70214">issue</link>.
109109 </para>
110110+ <para>
111111+ To use AppCenter on NixOS, add <literal>pantheon.appcenter</literal> to <xref linkend="opt-environment.systemPackages" />, <link linkend="module-services-flatpak">enable Flatpak support</link> and optionally add the <literal>appcenter</literal> Flatpak remote:
112112+ </para>
113113+<screen>
114114+<prompt>$ </prompt>flatpak remote-add --if-not-exists appcenter https://flatpak.elementary.io/repo.flatpakrepo
115115+</screen>
110116 </listitem>
111117 </varlistentry>
112118 </variablelist>
+1
nixos/tests/hardened.nix
···5757 # Test kernel module hardening
5858 with subtest("No more kernel modules can be loaded"):
5959 # note: this better a be module we normally wouldn't load ...
6060+ machine.wait_for_unit("disable-kernel-module-loading.service")
6061 machine.fail("modprobe dccp")
61626263