commit fc8011ad8d23411bcb950b03c80bd5ceb56c068c · pyrox.dev/nixpkgs

pyrox.dev / nixpkgs

lol

Ensure that nscd, sshd are created as system users

c0f70b4694bb2be1c25ef0e23e3f11f9d718d162 removed the fixed uid
assignment, but then it becomes necessary to set isSystemUser.

http://hydra.nixos.org/build/22182588

Eelco Dolstra 10 years ago fc8011ad cb6b9c52

+6 -3

2 changed files

expand all

unified split

nixos

modules

services

networking

ssh

sshd.nix

system

nscd.nix

+2 -2

nixos/modules/services/networking/ssh/sshd.nix

··· 282 282 config = mkIf cfg.enable { 283 283 284 284 users.extraUsers.sshd = 285 - { description = "SSH privilege separation user"; 286 - home = "/var/empty"; 285 + { isSystemUser = true; 286 + description = "SSH privilege separation user"; 287 287 }; 288 288 289 289 environment.etc = authKeysFiles ++ [

+4 -1

nixos/modules/services/system/nscd.nix

··· 42 42 43 43 config = mkIf cfg.enable { 44 44 45 - users.extraUsers.nscd.description = "Name service cache daemon user"; 45 + users.extraUsers.nscd = 46 + { isSystemUser = true; 47 + description = "Name service cache daemon user"; 48 + }; 46 49 47 50 systemd.services.nscd = 48 51 { description = "Name Service Cache Daemon";