checks: fail when db permissions are wrong

1 files changed, 12 insertions, 0 deletions

diff --git a/modules/system/checks.nix b/modules/system/checks.nix
index ad20a31..74bd44e 100644
--- a/modules/system/checks.nix
+++ b/modules/system/checks.nix
@@ -119,6 +119,17 @@ let
         exit 2
     fi
   '';
+
+  nixStore = ''
+    if test -w /nix/var/nix/db -a ! -O /nix/store; then
+        echo >&2 "error: the store is not owned by this user, but /nix/var/nix/db is writable"
+        echo >&2 "If you are using the daemon:"
+        echo >&2
+        echo >&2 "    sudo chown -R /nix/var/nix/db"
+        echo >&2
+        exit 2
+    fi
+  '';
 in
 
 {
@@ -131,6 +142,7 @@ in
       ${darwinChanges}
       ${runLink}
       ${buildUsers}
+      ${nixStore}
       ${nixChannels}
       ${nixInstaller}
       ${nixPath}