hosts/osmium: Polkit test
This commit is contained in:
parent
2ac1cc6fed
commit
da76595558
@ -7,6 +7,7 @@
|
||||
../../configuration/proxmox-vm
|
||||
|
||||
./nixfiles-updated-inputs.nix
|
||||
./polkit-test.nix
|
||||
];
|
||||
|
||||
boot.loader.grub.enable = true;
|
||||
|
29
hosts/osmium/polkit-test.nix
Normal file
29
hosts/osmium/polkit-test.nix
Normal file
@ -0,0 +1,29 @@
|
||||
{ ... }:
|
||||
|
||||
{
|
||||
|
||||
security.polkit.enable = true;
|
||||
security.polkit.extraConfig = ''
|
||||
polkit.addRule(function(action, subject) {
|
||||
if (
|
||||
action.id == "org.freedesktop.systemd1.manage-units"
|
||||
&& action.lookup("unit") == "update-from-hydra-olimex-esp32-poe.service"
|
||||
&& action.lookup("verb") == "start"
|
||||
&& subject.user == "clerie"
|
||||
) {
|
||||
return polkit.Result.YES;
|
||||
}
|
||||
});
|
||||
'';
|
||||
|
||||
services.update-from-hydra.paths.olimex-esp32-poe = {
|
||||
enable = true;
|
||||
hydraUrl = "https://hydra.clerie.de";
|
||||
hydraProject = "clerie";
|
||||
hydraJobset = "olimex-esp32-poe";
|
||||
hydraJob = "olimex-esp32-poe";
|
||||
nixStoreUri = "https://nix-cache.clerie.de";
|
||||
resultPath = "/srv/olimex-esp32-poe";
|
||||
};
|
||||
|
||||
}
|
Loading…
Reference in New Issue
Block a user