Dawoox/nixpkgs
1
1
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

nixos/google_oslogin: run as root

Browse Source 
This is needed in order to read the files in /var/google-users.d, as the program
sets the permissions to 750 and the user and group to root.

See: https://github.com/GoogleCloudPlatform/guest-oslogin/blob/20250821.00/src/oslogin_utils.cc#L1337-L1338
This commit is contained in:
Michael Daniels
2025-09-21 14:57:04 -04:00
parent 1d4e4fe41f
commit b385068794
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
nixos/modules/security/google_oslogin.nix
View File

@@ -77,7 +77,7 @@ in
'';
};
services.openssh.authorizedKeysCommand = "/etc/ssh/authorized_keys_command_google_oslogin %u";
services.openssh.authorizedKeysCommandUser = "nobody";
services.openssh.authorizedKeysCommandUser = "root";
};
}