summary refs log tree commit diff
path: root/nixos/tests/unbound.nix
diff options
context:
space:
mode:
authorSymphorien Gibol <symphorien+git@xlumurb.eu>2021-03-07 14:54:00 +0100
committerSymphorien Gibol <symphorien+git@xlumurb.eu>2021-04-14 20:40:00 +0200
commit7a87973b4ced86e1ba94ee84449979d6afebc9ea (patch)
treefca832b3d43925bd5d420ea083671d662a97e5fe /nixos/tests/unbound.nix
parent311ceed827f531f88f46222920cd1ebb2c101f73 (diff)
downloadnixpkgs-7a87973b4ced86e1ba94ee84449979d6afebc9ea.tar
nixpkgs-7a87973b4ced86e1ba94ee84449979d6afebc9ea.tar.gz
nixpkgs-7a87973b4ced86e1ba94ee84449979d6afebc9ea.tar.bz2
nixpkgs-7a87973b4ced86e1ba94ee84449979d6afebc9ea.tar.lz
nixpkgs-7a87973b4ced86e1ba94ee84449979d6afebc9ea.tar.xz
nixpkgs-7a87973b4ced86e1ba94ee84449979d6afebc9ea.tar.zst
nixpkgs-7a87973b4ced86e1ba94ee84449979d6afebc9ea.zip
nixos/users: require one of users.users.name.{isSystemUser,isNormalUser}
As the only consequence of isSystemUser is that if the uid is null then
it's allocated below 500, if a user has uid = something below 500 then
we don't require isSystemUser to be set.

Motivation: https://github.com/NixOS/nixpkgs/issues/112647
Diffstat (limited to 'nixos/tests/unbound.nix')
-rw-r--r--nixos/tests/unbound.nix11
1 files changed, 7 insertions, 4 deletions
diff --git a/nixos/tests/unbound.nix b/nixos/tests/unbound.nix
index d4b8bb15ced..ca9718ac633 100644
--- a/nixos/tests/unbound.nix
+++ b/nixos/tests/unbound.nix
@@ -132,12 +132,15 @@ import ./make-test-python.nix ({ pkgs, lib, ... }:
 
         users.users = {
           # user that is permitted to access the unix socket
-          someuser.extraGroups = [
-            config.users.users.unbound.group
-          ];
+          someuser = {
+            isSystemUser = true;
+            extraGroups = [
+              config.users.users.unbound.group
+            ];
+          };
 
           # user that is not permitted to access the unix socket
-          unauthorizeduser = {};
+          unauthorizeduser = { isSystemUser = true; };
         };
 
         environment.etc = {