Artem Sheremet
Artem Sheremet
### Checklist - [x] I have filled out the template to the best of my ability. - [x] This only contains 1 feature request (if you have multiple feature requests,...
### Checklist - [x] I have filled out the template to the best of my ability. - [x] This only contains 1 feature request (if you have multiple feature requests,...
I use `nix develop --unset PATH` locally to make sure all my dependencies are installed through Nix and I'm not using anything already installed on my system (e.g. via `apt`)....
Fragment in question: https://github.com/Mic92/sops-nix/blob/6e5a38e08a2c31ae687504196a230ae00ea95133/modules/sops/default.nix#L322-L330 I understand the reason for `pathNotInStore` is to prevent people from accidentally leaking a private key key into the (world-readable) Nix store. However with some age...
Sample scenario: hashed root password is encrypted with sops-nix using SSH host key: ```nix sops.secrets.root-password = { sopsFile = secrets/root-password.bin; format = "binary"; neededForUsers = true; }; users.users.root.hashedPasswordFile = config.sops.secrets.root-password.path;...
Looks like impermanence will create a `.device` dependency only if `${path}` in `environment.persistence.${path}` is a mountPoint of an existing filesystem: https://github.com/nix-community/impermanence/blob/4b3e914cdf97a5b536a889e939fb2fd2b043a170/nixos.nix#L757 So if I have e.g. `/sdcard` fileSystems.mountPoint but use...