···

       
27
       
 
       
<screen>

     

       
28
       
 
       
# nixos-container create foo --config '

     

       
29
       
 
       
  <xref linkend="opt-services.openssh.enable"/> = true;

     

       
30
       
-
       
  <link linkend="opt-users.users._name__.openssh.authorizedKeys.keys">users.extraUsers.root.openssh.authorizedKeys.keys</link> = ["ssh-dss AAAAB3N…"];

     

       
31
       
 
       
'

     

       
32
       
 
       
</screen>

     

       
33
       
 
       
 </para>

     

···

       
27
       
 
       
<screen>

     

       
28
       
 
       
# nixos-container create foo --config '

     

       
29
       
 
       
  <xref linkend="opt-services.openssh.enable"/> = true;

     

       
30
       
+
       
  <link linkend="opt-users.users._name__.openssh.authorizedKeys.keys">users.users.root.openssh.authorizedKeys.keys</link> = ["ssh-dss AAAAB3N…"];

     

       
31
       
 
       
'

     

       
32
       
 
       
</screen>

     

       
33
       
 
       
 </para>

     

···

       
19
       
 
       
  All users that should have permission to change network settings must belong

     

       
20
       
 
       
  to the <code>networkmanager</code> group:

     

       
21
       
 
       
<programlisting>

     

       
22
       
-
       
<link linkend="opt-users.users._name__.extraGroups">users.extraUsers.youruser.extraGroups</link> = [ "networkmanager" ];

     

       
23
       
 
       
</programlisting>

     

       
24
       
 
       
 </para>

     

       
25
       
 
       


     

···

       
19
       
 
       
  All users that should have permission to change network settings must belong

     

       
20
       
 
       
  to the <code>networkmanager</code> group:

     

       
21
       
 
       
<programlisting>

     

       
22
       
+
       
<link linkend="opt-users.users._name__.extraGroups">users.users.youruser.extraGroups</link> = [ "networkmanager" ];

     

       
23
       
 
       
</programlisting>

     

       
24
       
 
       
 </para>

     

       
25
       
 
       


     

···

       
20
       
 
       
  follows:

     

       
21
       
 
       
<!-- FIXME: this might not work if the user is unmanaged. -->

     

       
22
       
 
       
<programlisting>

     

       
23
       
-
       
<link linkend="opt-users.users._name__.openssh.authorizedKeys.keys">users.extraUsers.alice.openssh.authorizedKeys.keys</link> =

     

       
24
       
 
       
  [ "ssh-dss AAAAB3NzaC1kc3MAAACBAPIkGWVEt4..." ];

     

       
25
       
 
       
</programlisting>

     

       
26
       
 
       
 </para>

     

···

       
20
       
 
       
  follows:

     

       
21
       
 
       
<!-- FIXME: this might not work if the user is unmanaged. -->

     

       
22
       
 
       
<programlisting>

     

       
23
       
+
       
<link linkend="opt-users.users._name__.openssh.authorizedKeys.keys">users.users.alice.openssh.authorizedKeys.keys</link> =

     

       
24
       
 
       
  [ "ssh-dss AAAAB3NzaC1kc3MAAACBAPIkGWVEt4..." ];

     

       
25
       
 
       
</programlisting>

     

       
26
       
 
       
 </para>

     

···

       
66
       
 
       
  <literal>mutableUsers = false</literal>. Another way is to temporarily add

     

       
67
       
 
       
  the following to your configuration:

     

       
68
       
 
       
<screen>

     

       
69
       
-
       
<link linkend="opt-users.users._name__.initialHashedPassword">users.extraUsers.your-user.initialHashedPassword</link> = "test";

     

       
70
       
 
       
</screen>

     

       
71
       
 
       
  <emphasis>Important:</emphasis> delete the $hostname.qcow2 file if you have

     

       
72
       
 
       
  started the virtual machine at least once without the right users, otherwise

     

···

       
66
       
 
       
  <literal>mutableUsers = false</literal>. Another way is to temporarily add

     

       
67
       
 
       
  the following to your configuration:

     

       
68
       
 
       
<screen>

     

       
69
       
+
       
<link linkend="opt-users.users._name__.initialHashedPassword">users.users.your-user.initialHashedPassword</link> = "test";

     

       
70
       
 
       
</screen>

     

       
71
       
 
       
  <emphasis>Important:</emphasis> delete the $hostname.qcow2 file if you have

     

       
72
       
 
       
  started the virtual machine at least once without the right users, otherwise

     

···

       
211
       
 
       
    use <literal>sudo</literal>)

     

       
212
       
 
       
   </para>

     

       
213
       
 
       
<programlisting>

     

       
214
       
-
       
<link linkend="opt-users.users._name__.initialHashedPassword">users.extraUsers.root.initialHashedPassword</link> = "";

     

       
215
       
 
       
              </programlisting>

     

       
216
       
 
       
  </listitem>

     

       
217
       
 
       
  <listitem>

     

···

       
211
       
 
       
    use <literal>sudo</literal>)

     

       
212
       
 
       
   </para>

     

       
213
       
 
       
<programlisting>

     

       
214
       
+
       
<link linkend="opt-users.users._name__.initialHashedPassword">users.users.root.initialHashedPassword</link> = "";

     

       
215
       
 
       
              </programlisting>

     

       
216
       
 
       
  </listitem>

     

       
217
       
 
       
  <listitem>