···

       
187
       
187
       
 
       
      # fwupd-refresh expects a user that we do not create, so just run with DynamicUser

     

       
188
       
188
       
 
       
      # instead and ensure we take ownership of /var/lib/fwupd

     

       
189
       
189
       
 
       
      services.fwupd-refresh.serviceConfig = {

     

       
190
       
190
       
-
       
        DynamicUser = true;

     

       
191
       
190
       
 
       
        StateDirectory = "fwupd";

     

       
192
       
191
       
 
       
      };

     

       
193
       
192
       
 
       


     

       
194
       
193
       
 
       
      timers.fwupd-refresh.wantedBy = [ "timers.target" ];

     

       
195
       
194
       
 
       
    };

     

       
195
       
195
       
+
       


     

       
196
       
196
       
+
       
    users.users.fwupd-refresh = {

     

       
197
       
197
       
+
       
      isSystemUser = true;

     

       
198
       
198
       
+
       
      group = "fwupd-refresh";

     

       
199
       
199
       
+
       
    };

     

       
200
       
200
       
+
       
    users.groups.fwupd-refresh = {};

     

       
196
       
201
       
 
       


     

       
197
       
202
       
 
       
    security.polkit.enable = true;

     

       
198
       
203
       
 
       
  };