-
-
Notifications
You must be signed in to change notification settings - Fork 120
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: remove boot.isContainer #145
Conversation
mkdir $out | ||
touch $out/${config.system.boot.loader.initrdFile} | ||
''; | ||
system.build.initialRamdiskSecretAppender = pkgs.writeShellScriptBin "append-initrd-secrets" ""; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe we can use true here, too?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We can't, because the binary needs to be named append-initrd-secrets
. We could in theory put a symlink to true
there, but I don't think that would make any difference while being a longer nix expression
Co-authored-by: Sandro <[email protected]>
I haven't encountered any problems so far, so I'm just merging it |
Now we also activated console, linux firmware and kernel which is not working in WSL. PRs to make this better:
so we now should set:
The following units can be removed by setting
|
and to add:
sshd.pam changed: -session optional pam_loginuid.so
+session required pam_loginuid.so only changed left (I will probably revisit this in the next days to remove the kernel.):
Now the only change left is timesyncd and we can also remove the fake inirtd and so on again. Going to prepare the PR when my 5 PRs are merged. I've created #149 to keep track of this. |
* upstream/main: Fix syschdemd exit code (nix-community#140) update remaining references to wsl.automountPath (nix-community#158) Update flakes (nix-community#124) wsl.conf: proper option types (nix-community#153) Fix eval by disabling module completely when wsl.enable = false (nix-community#151) NixOS users.users.<user> attribute name and .name can differ (nix-community#147) switch nixpkgs.overlays to inline overlay (nix-community#150) feat: native systemd support (nix-community#134) remove boot.isContainer (nix-community#145) Do not import minimal profile by default (nix-community#144)
Do not set boot.isContainer to true, but set the required options directly. This gets around some quirks isContainer introduces in other modules (especially one in PAM that is related to solving #138). This might introduce issues related to
udev
,audit
andmodprobe
, which get activated by removing that option; though i have not encountered any so far