hosts/osmium: Polkit test
This commit is contained in:
parent
2ac1cc6fed
commit
da76595558
@ -7,6 +7,7 @@
|
|||||||
../../configuration/proxmox-vm
|
../../configuration/proxmox-vm
|
||||||
|
|
||||||
./nixfiles-updated-inputs.nix
|
./nixfiles-updated-inputs.nix
|
||||||
|
./polkit-test.nix
|
||||||
];
|
];
|
||||||
|
|
||||||
boot.loader.grub.enable = true;
|
boot.loader.grub.enable = true;
|
||||||
|
29
hosts/osmium/polkit-test.nix
Normal file
29
hosts/osmium/polkit-test.nix
Normal file
@ -0,0 +1,29 @@
|
|||||||
|
{ ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
|
||||||
|
security.polkit.enable = true;
|
||||||
|
security.polkit.extraConfig = ''
|
||||||
|
polkit.addRule(function(action, subject) {
|
||||||
|
if (
|
||||||
|
action.id == "org.freedesktop.systemd1.manage-units"
|
||||||
|
&& action.lookup("unit") == "update-from-hydra-olimex-esp32-poe.service"
|
||||||
|
&& action.lookup("verb") == "start"
|
||||||
|
&& subject.user == "clerie"
|
||||||
|
) {
|
||||||
|
return polkit.Result.YES;
|
||||||
|
}
|
||||||
|
});
|
||||||
|
'';
|
||||||
|
|
||||||
|
services.update-from-hydra.paths.olimex-esp32-poe = {
|
||||||
|
enable = true;
|
||||||
|
hydraUrl = "https://hydra.clerie.de";
|
||||||
|
hydraProject = "clerie";
|
||||||
|
hydraJobset = "olimex-esp32-poe";
|
||||||
|
hydraJob = "olimex-esp32-poe";
|
||||||
|
nixStoreUri = "https://nix-cache.clerie.de";
|
||||||
|
resultPath = "/srv/olimex-esp32-poe";
|
||||||
|
};
|
||||||
|
|
||||||
|
}
|
Loading…
Reference in New Issue
Block a user