heather/common: passwordless sudo for mikl + fix deprecated options
- common/default.nix: add mikl to wheel + security.sudo.wheelNeedsPassword=false. Without this, root is unreachable on a fresh NixOS-yc image (no root password, no rescue channel) — nixos-rebuild switch is impossible. Mirrors the NOPASSWD:ALL that old YC boxes got via cloud-config user-data. - home/server.nix: programs.git.extraConfig -> .settings, programs.git.delta -> programs.delta with enableGitIntegration=true (deprecated warnings). - image.nix: boot.loader.grub.timeout -> boot.loader.timeout (renamed option).
This commit is contained in:
parent
79260cec6f
commit
411a8ba689
5 changed files with 19 additions and 5 deletions
|
|
@ -43,7 +43,7 @@ with lib;
|
|||
boot.loader.grub.enable = mkDefault true;
|
||||
boot.loader.grub.device = "/dev/vda";
|
||||
boot.loader.grub.configurationLimit = 1; # только текущее, но механизм выбора есть
|
||||
boot.loader.grub.timeout = 0;
|
||||
boot.loader.timeout = 0;
|
||||
boot.loader.systemd-boot.enable = mkForce false;
|
||||
boot.loader.efi.canTouchEfiVariables = mkForce false;
|
||||
|
||||
|
|
@ -89,7 +89,7 @@ with lib;
|
|||
image.baseName = "heather";
|
||||
image.extension = "qcow2";
|
||||
system.nixos.tags = [ "yandex-cloud" ];
|
||||
system.build.image = import (modulesPath + "/lib/make-disk-image.nix") {
|
||||
system.build.image = import (modulesPath + "/../lib/make-disk-image.nix") {
|
||||
name = "heather-image";
|
||||
inherit (config.image) baseName;
|
||||
partitionTableType = "legacy"; # MBR + single ext4 root
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue