From 8d7a8e380be8f830e5b980550295e2992c7c4f99 Mon Sep 17 00:00:00 2001
From: Christoph Cullmann <christoph@cullmann.io>
Date: Wed, 7 May 2025 23:09:20 +0200
Subject: [PATCH] allow GrapheneOS install

https://grapheneos.org/install/web did work now perfect even with Flatpak chromium
---
 share/common.nix | 3 +++
 share/users.nix  | 4 ++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/share/common.nix b/share/common.nix
index d2bd213..42e5b62 100644
--- a/share/common.nix
+++ b/share/common.nix
@@ -528,6 +528,9 @@ in
   virtualisation.virtualbox.host.enableHardening = false;
   virtualisation.virtualbox.host.addNetworkInterface = false;
 
+  # allow GrapheneOS install
+  programs.adb.enable = true;
+
   # use doas instead of sudo
   security.sudo.enable = false;
   security.doas.enable = true;
diff --git a/share/users.nix b/share/users.nix
index 89f1886..56fb856 100644
--- a/share/users.nix
+++ b/share/users.nix
@@ -44,8 +44,8 @@ in
       # it's me :P
       description = "Christoph Cullmann";
 
-      # allow VirtualBox and sudo for my main user
-      extraGroups = [ "vboxusers" "wheel" ];
+      # allow GrapheneOS install, KVM, VirtualBox and doas for my main user
+      extraGroups = [ "adbusers" "kvm" "vboxusers" "wheel" ];
 
       # init password
       hashedPassword = config.users.users.root.hashedPassword;