···

       
123
       
123
       
 
       
      group = mkOption {

     

       
124
       
124
       
 
       
        type = types.str;

     

       
125
       
125
       
 
       
        apply = x: assert (builtins.stringLength x < 32 || abort "Group name '${x}' is longer than 31 characters which is not allowed!"); x;

     

       
126
       
126
       
-
       
        default = "nogroup";

     

       
126
       
126
       
+
       
        default = "";

     

       
127
       
127
       
 
       
        description = "The user's primary group.";

     

       
128
       
128
       
 
       
      };

     

       
129
       
129
       
 
       


     
···

       
636
       
636
       
 
       
            in xor isEffectivelySystemUser user.isNormalUser;

     

       
637
       
637
       
 
       
            message = ''

     

       
638
       
638
       
 
       
              Exactly one of users.users.${user.name}.isSystemUser and users.users.${user.name}.isNormalUser must be set.

     

       
639
       
639
       
+
       
            '';

     

       
640
       
640
       
+
       
          }

     

       
641
       
641
       
+
       
          {

     

       
642
       
642
       
+
       
            assertion = user.group != "";

     

       
643
       
643
       
+
       
            message = ''

     

       
644
       
644
       
+
       
              users.users.${user.name}.group is unset. This used to default to

     

       
645
       
645
       
+
       
              nogroup, but this is unsafe. For example you can create a group

     

       
646
       
646
       
+
       
              for this user with:

     

       
647
       
647
       
+
       
              users.users.${user.name}.group = "${user.name}";

     

       
648
       
648
       
+
       
              users.groups.${user.name} = {};

     

       
639
       
649
       
 
       
            '';

     

       
640
       
650
       
 
       
          }

     

       
641
       
651
       
 
       
        ]