commit b385068794dbcad930d9229bbc682e695afd4b6a · pyrox.dev/nixpkgs

pyrox.dev / nixpkgs

lol

nixos/google_oslogin: run as root

This is needed in order to read the files in /var/google-users.d, as the program
sets the permissions to 750 and the user and group to root.

See: https://github.com/GoogleCloudPlatform/guest-oslogin/blob/20250821.00/src/oslogin_utils.cc#L1337-L1338

Michael Daniels 3 months ago b3850687 1d4e4fe4

options

unified split

Changed files

+1 -1

nixos

modules

security

google_oslogin.nix

+1 -1

nixos/modules/security/google_oslogin.nix

···

       77
       77
        
             '';

     

       78
       78
        
           };

     

       79
       79
        
           services.openssh.authorizedKeysCommand = "/etc/ssh/authorized_keys_command_google_oslogin %u";

     

       80
       80
       -
           services.openssh.authorizedKeysCommandUser = "nobody";

     

       80
       80
       +
           services.openssh.authorizedKeysCommandUser = "root";

     

       81
       81
        
         };

     

       82
       82
        
       

     

       83
       83
        
       }