commit 74a074c98cd15a326fb188515f15eee453919658
parent 2041df171c86e76480f4144ec2f804ecdcdd0a3e
Author: Katja (zaphyra) <git@ctu.cx>
Date: Wed, 4 Jun 2025 12:13:46 +0200
parent 2041df171c86e76480f4144ec2f804ecdcdd0a3e
Author: Katja (zaphyra) <git@ctu.cx>
Date: Wed, 4 Jun 2025 12:13:46 +0200
sudo just disable lecture
2 files changed, 5 insertions(+), 6 deletions(-)
diff --git a/config/nixos/modules/filesystem/impermanence.nix b/config/nixos/modules/filesystem/impermanence.nix @@ -132,13 +132,12 @@ in directories = [ "/etc/zfs" "/var/log" - "/var/db/sudo/lectured" # "We trust you have received the usual lecture from the local System Administrator." "/var/lib/nixos" "/var/lib/systemd/coredump" ] ++ cfg.system.dirs; files = [ "/etc/machine-id" - ] ++ cfg.system.files; + ] ++cfg.system.files; }; #katja: hack to persist `/var/lib/private/<service>` (see https://github.com/nix-community/impermanence/issues/213)
diff --git a/config/nixos/modules/presets/base.nix b/config/nixos/modules/presets/base.nix @@ -23,13 +23,11 @@ in config = lib.mkIf cfg.enable { environment.defaultPackages = lib.mkForce [ ]; - users.mutableUsers = lib.mkForce false; - programs.command-not-found.enable = false; - # Remove perl from activation - # system.etc.overlay.enable = lib.mkDefault true; + # make things more declerative services.userborn.enable = lib.mkDefault true; + users.mutableUsers = lib.mkForce false; networking = { hostId = builtins.substring 0 8 (builtins.hashString "sha256" hostConfig.hostName); @@ -82,6 +80,8 @@ in fstrim.enable = lib.mkDefault true; }; + security.sudo.extraConfig = "Defaults lecture=\"never\""; # "We trust you have received the usual lecture from the local System Administrator." + # thanks piegames (https://git.darmstadt.ccc.de/piegames/home-config/-/blob/master/modules/generic.nix#L84) system.activationScripts = { diff = {