allow olm and fix /var/lib/nixos missing persistence

This commit is contained in:
Christoph Cullmann 2024-08-19 23:20:17 +02:00
parent 5be28dcbd3
commit e31ddcec43
No known key found for this signature in database

View file

@ -100,6 +100,10 @@ in
environment.persistence."/nix/persistent" = {
hideMounts = true;
directories = [
# user and group mappings
# Either "/var/lib/nixos" has to be persisted, or all users and groups must have a uid/gid specified. The following users are missing a uid
"/var/lib/nixos"
# systemd timers
{ directory = "/var/lib/systemd/timers"; user = "root"; group = "root"; mode = "u=rwx,g=rx,o=rx"; }
@ -331,6 +335,11 @@ in
zsh
];
# olm is insecure
nixpkgs.config.permittedInsecurePackages = [
"olm-3.2.16"
];
# run browsers in a sandbox
programs.firejail = {
enable = true;