feat: sudo-rs autism

sioodmy · Nov 10, 2023 · 819892c · 819892c
1 parent 62e44cb
commit 819892c
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 3 deletions.
diff --git a/system/core/schizo.nix b/system/core/schizo.nix
@@ -1,5 +1,5 @@
 {
-  config,
+  inputs,
   pkgs,
   lib,
   ...
@@ -102,7 +102,33 @@
       };
     };
 
-    sudo.enable = true;
+    sudo.enable = lib.mkForce false;
+    sudo-rs = {
+      enable = true;
+      extraRules = [
+        {
+          commands = [
+            {
+              command = "/run/current-system/sw/bin/poweroff";
+              options = ["NOPASSWD"];
+            }
+            {
+              command = "/run/current-system/sw/bin/reboot";
+              options = ["NOPASSWD"];
+            }
+            {
+              command = "/run/current-system/sw/bin/nixos-rebuild";
+              options = ["NOPASSWD"];
+            }
+            {
+              command = "/run/current-system/sw/bin/nh";
+              options = ["NOPASSWD"];
+            }
+          ];
+          groups = ["wheel"];
+        }
+      ];
+    };
   };
 
   boot.kernel.sysctl = {

diff --git a/system/core/system.nix b/system/core/system.nix
@@ -41,7 +41,6 @@
     btrfs-progs
     appimage-run
     starship # having starship here means pkgs.startship will be stored during build and not during promptInit
-    (writeScriptBin "sudo" ''exec doas "$@"'')
   ];
 
   time = {