Skip to content

Commit f2856ba

Browse files
Merge pull request #423 from NuschtOS/fix-remote-build
nix: fix remote build user by configuring usable shell
2 parents 12ac49d + facd5e8 commit f2856ba

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

modules/nix.nix

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,10 @@ in
8080
users.users.${cfg.remoteBuilder.name} = lib.mkIf cfg.remoteBuilder.enable {
8181
group = "nogroup";
8282
isSystemUser = true;
83+
# sshd runs the forced command from authorizedKeys as `$shell -c ...`,
84+
# so a nologin shell (the default for system users) breaks remote building with:
85+
# "protocol mismatch, got 'This account is currently not available.'"
86+
shell = pkgs.bashInteractive;
8387
openssh.authorizedKeys.keys = map
8488
(key:
8589
let

0 commit comments

Comments
 (0)