Join Nostr
2025-10-01 03:23:59 UTC
in reply to

sodiboo :pride_heart: on Nostr: yeah. that part. ought to also be in `nix.conf`. I , uh, really don't understand why ...

yeah. that part. ought to also be in `nix.conf`.

I , uh, really don't understand why it's even possible to add that as a flake attribute. because it's just straight up not useful. in any properly configured nix system, it *will* be ignored, unless ran as a trusted user (== root privileges; note that on NixOS this is stronger than `@wheel` because a trusted user can just overwrite the sudo binary and reboot. no password needed). and this is not a bug, because trusted public keys do indicate absolute trust. they really do actually *need* to be nontrivial to add.