jasmine/dotfiles.nix
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

fix cache dir sandbox path

Browse source
This commit is contained in:
♥ Minnie ♥ 2024-01-21 22:18:12 +08:00
parent 3dc17a8295
commit 3e16c5a55d
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
nixos/common/global/age.nix
View file

@ -12,13 +12,14 @@ in
rekey.masterIdentities = [ ../users/sajenim/agenix-rekey.pub ]; rekey.masterIdentities = [ ../users/sajenim/agenix-rekey.pub ];
# Pubkey for rekeying # Pubkey for rekeying
rekey.hostPubkey = ../../${hostname}/ssh_host_ed25519_key.pub; rekey.hostPubkey = ../../${hostname}/ssh_host_ed25519_key.pub;
# As user not a trusted-users in our nix.conf # Where we store the rekeyed secrets
# we must add age.rekey.cacheDir as a global extra sandbox path
rekey.cacheDir = "/var/tmp/agenix-rekey/\"$UID\""; rekey.cacheDir = "/var/tmp/agenix-rekey/\"$UID\"";
}; };
# Required to persist `/var/tmp/agenix-rekey` # Required to persist `/var/tmp/agenix-rekey`
environment.persistence."/persist".directories = [ environment.persistence."/persist".directories = [
{ directory = "/var/tmp/agenix-rekey"; mode = "1777"; } { directory = "/var/tmp/agenix-rekey"; mode = "1777"; }
]; ];
# As user not a trusted-users in our nix.conf
# we must add age.rekey.cacheDir as a global extra sandbox path
nix.settings.extra-sandbox-paths = [ "/var/tmp/agenix-rekey" ];
} }