pyrox.dev
1{ ... }:
2
3{
4 name = "pam-u2f";
5
6 nodes.machine =
7 { ... }:
8 {
9 security.pam.u2f = {
10 enable = true;
11 control = "required";
12 settings = {
13 cue = true;
14 debug = true;
15 interactive = true;
16 origin = "nixos-test";
17 # Freeform option
18 userpresence = 1;
19 };
20 };
21 };
22
23 testScript = ''
24 machine.wait_for_unit("multi-user.target")
25 machine.succeed(
26 'egrep "auth required .*/lib/security/pam_u2f.so.*cue.*debug.*interactive.*origin=nixos-test.*userpresence=1" /etc/pam.d/ -R'
27 )
28 '';
29}