Commit 326904b1 authored by nicoo's avatar nicoo
Browse files

nixos/google-compute-config: Add sudo-rs rules

parent a8e6f0a8

nixos/modules/virtualisation/google-compute-config.nix

+4 −0
Original line number Diff line number Diff line
@@ -84,6 +84,10 @@ in 
    { groups = [ "google-sudoers" ]; commands = [ { command = "ALL"; options = [ "NOPASSWD" ]; } ]; }

  ];



  security.sudo-rs.extraRules = mkIf config.users.mutableUsers [

    { groups = [ "google-sudoers" ]; commands = [ { command = "ALL"; options = [ "NOPASSWD" ]; } ]; }

  ];



  users.groups.google-sudoers = mkIf config.users.mutableUsers { };



  boot.extraModprobeConfig = readFile "${pkgs.google-guest-configs}/etc/modprobe.d/gce-blacklist.conf";