oceanbox/platform
6
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix: move sudo settings from hpc module to actual nodes

Browse Source
This commit is contained in:
Jonas Juselius
2025-09-28 12:30:56 +02:00
parent 8c5ca68530
commit f6db232ca7
4 changed files with 16 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
ekman/fs-work/default.nix
View File

@@ -25,6 +25,10 @@ in {
# services.udev.extraRules = '' # services.udev.extraRules = ''
# KERNEL=="ibp65s0", SUBSYSTEM=="net", ATTR{create_child}:="0x7666" # KERNEL=="ibp65s0", SUBSYSTEM=="net", ATTR{create_child}:="0x7666"
# ''; # '';
security.sudo.extraConfig = ''
%sif ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
%admin ALL=(admin) NOPASSWD: ALL
'';
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
rdma-core rdma-core
@@ -40,9 +44,9 @@ in {
users = true; users = true;
opt = true; opt = true;
work = false; work = false;
data = false; data = true;
ceph = true;
backup = false; backup = false;
ceph = false;
}; };
}; };

8
ekman/login/default.nix
View File

@@ -283,9 +283,11 @@ in
# }; # };
# }; # };
# security.sudo.extraConfig = '' security.sudo.extraConfig = ''
# gitlab-runner ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity %sif ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
# ''; %admin ALL=(admin) NOPASSWD: ALL
# gitlab-runner ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
'';
security.pam = { security.pam = {
services.sshd.googleAuthenticator.enable = true; services.sshd.googleAuthenticator.enable = true;

4
modules/hpc/hpc.nix
View File

@@ -82,10 +82,6 @@ let
turbovnc turbovnc
emacs emacs
]; ];
security.sudo.extraConfig = ''
%sif ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
%admin ALL=(admin) NOPASSWD: ALL
'';
}; };
compute = { compute = {

8
rossby/login/default.nix
View File

@@ -278,9 +278,11 @@ in
# }; # };
# }; # };
# security.sudo.extraConfig = '' security.sudo.extraConfig = ''
# gitlab-runner ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity %sif ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
# ''; %admin ALL=(admin) NOPASSWD: ALL
# gitlab-runner ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
'';
security.pam = { security.pam = {
services.sshd.googleAuthenticator.enable = true; services.sshd.googleAuthenticator.enable = true;