clerie
/
nixfiles
1
0
Fork 0
Code

hosts/osmium: Polkit test

This commit is contained in:
clerie 2024-01-30 09:53:27 +01:00
parent 2ac1cc6fed
commit da76595558
2 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/osmium/configuration.nix
View File

@ -7,6 +7,7 @@
../../configuration/proxmox-vm
./nixfiles-updated-inputs.nix
./polkit-test.nix
];
boot.loader.grub.enable = true;

29
hosts/osmium/polkit-test.nix Normal file
View File

@ -0,0 +1,29 @@
{ ... }:
{
security.polkit.enable = true;
security.polkit.extraConfig = ''
polkit.addRule(function(action, subject) {
if (
action.id == "org.freedesktop.systemd1.manage-units"
&& action.lookup("unit") == "update-from-hydra-olimex-esp32-poe.service"
&& action.lookup("verb") == "start"
&& subject.user == "clerie"
) {
return polkit.Result.YES;
}
});
'';
services.update-from-hydra.paths.olimex-esp32-poe = {
enable = true;
hydraUrl = "https://hydra.clerie.de";
hydraProject = "clerie";
hydraJobset = "olimex-esp32-poe";
hydraJob = "olimex-esp32-poe";
nixStoreUri = "https://nix-cache.clerie.de";
resultPath = "/srv/olimex-esp32-poe";
};
}