commit 78155df21dbdb8bd4c471df69e9352ec3471bf45 · pyrox.dev/nixpkgs

+20
nixos/modules/config/users-groups.nix
···

       592
       592
        
             '';

     

       593
       593
        
           };

     

       594
       594
        
       

     

       595
       595
       +
           # Warn about user accounts with deprecated password hashing schemes

     

       596
       596
       +
           system.activationScripts.hashes = {

     

       597
       597
       +
             deps = [ "users" ];

     

       598
       598
       +
             text = ''

     

       599
       599
       +
               users=()

     

       600
       600
       +
               while IFS=: read -r user hash tail; do

     

       601
       601
       +
                 if [[ "$hash" = "$"* && ! "$hash" =~ ^\$(y|gy|7|2b|2y|2a|6)\$ ]]; then

     

       602
       602
       +
                   users+=("$user")

     

       603
       603
       +
                 fi

     

       604
       604
       +
               done </etc/shadow

     

       605
       605
       +
       

     

       606
       606
       +
               if (( "''${#users[@]}" )); then

     

       607
       607
       +
                 echo "

     

       608
       608
       +
               WARNING: The following user accounts rely on password hashes that will

     

       609
       609
       +
               be removed in NixOS 23.05. They should be renewed as soon as possible."

     

       610
       610
       +
                 printf ' - %s\n' "''${users[@]}"

     

       611
       611
       +
               fi

     

       612
       612
       +
             '';

     

       613
       613
       +
           };

     

       614
       614
       +
       

     

       595
       615
        
           # for backwards compatibility

     

       596
       616
        
           system.activationScripts.groups = stringAfter [ "users" ] "";

     

       597
       617