srvos
srvos copied to clipboard
hardware-amazon conflicts with common
https://github.com/nix-community/srvos/blob/59e4d88787de0a2bdc58854566ab90419de73a06/nixos/common/sudo.nix#L18-L23
is triggered by
https://github.com/NixOS/nixpkgs/blob/02b5eec8cb2b350925debe86f2d5025c1a09a44b/nixos/modules/services/misc/amazon-ssm-agent.nix#L22-L30
Setting users.users.ssm-user.extraGroups = [ "wheel" ]; does not help.
security.sudo.execWheelOnly = lib.mkForce false;
Yup, ideally I'd like to keep it true though. Any chance the check could be updated to:
- Mention the group or user that isn't root or wheel
- Check that the user doesn't have the wheel group?
Thanks!
Bump