diff options
| author | Daiderd Jordan <daiderd@gmail.com> | 2021-02-17 21:58:03 +0100 |
|---|---|---|
| committer | Daiderd Jordan <daiderd@gmail.com> | 2021-02-17 22:04:54 +0100 |
| commit | 5c3146b75d5d478f0693d0ea6c83f1da8382ff56 (patch) | |
| tree | 1dc00527144f6389ca5458feb7e6dc928d76e6aa /modules/system | |
| parent | 3b28c4675a4c6a1fa2a1448e8e9abcfb4cb5c770 (diff) | |
users: migrate nixbld -> _nixbld
According to some investigation creating "role" accounts avoids
migration problems when upgrading to certain macOS versions, so create
the build users to match that definition and remove the old ones if
present.
Role accounts require name starting with _ and UID in 200-400 range
Diffstat (limited to 'modules/system')
| -rw-r--r-- | modules/system/checks.nix | 20 |
1 files changed, 18 insertions, 2 deletions
diff --git a/modules/system/checks.nix b/modules/system/checks.nix index 22a4d86..d19d789 100644 --- a/modules/system/checks.nix +++ b/modules/system/checks.nix @@ -44,14 +44,29 @@ let fi ''; + oldBuildUsers = '' + if dscl . -list /Users | grep -q '^nixbld'; then + echo "[1;31mwarning: Detected old style nixbld users[0m" >&2 + echo "These can cause migration problems when upgrading to certain macOS versions" >&2 + echo "Running the installer again will remove and recreate the users in a way that avoids these problems" >&2 + echo >&2 + echo "$ darwin-install" >&2 + echo >&2 + echo "or enable to automatically manage the users" >&2 + echo >&2 + echo " users.nix.configureBuildUsers = true;" >&2 + echo >&2 + fi + ''; + buildUsers = '' buildUser=$(dscl . -read /Groups/nixbld GroupMembership 2>&1 | awk '/^GroupMembership: / {print $2}') || true if [ -z $buildUser ]; then echo "[1;31merror: Using the nix-daemon requires build users, aborting activation[0m" >&2 echo "Create the build users or disable the daemon:" >&2 - echo "$ ./bootstrap -u" >&2 + echo "$ darwin-install" >&2 echo >&2 - echo "or set" >&2 + echo "or set (this requires some manual intervention to restore permissions)" >&2 echo >&2 echo " services.nix-daemon.enable = false;" >&2 echo >&2 @@ -200,6 +215,7 @@ in system.checks.text = mkMerge [ darwinChanges runLink + oldBuildUsers (mkIf config.nix.useDaemon buildUsers) (mkIf (!config.nix.useDaemon) singleUser) nixStore |