oceanbox/platform
6
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

fix: move sudo settings from hpc module to actual nodes

Browse Source
This commit is contained in:
Jonas Juselius
2025-09-28 12:30:56 +02:00
parent 8c5ca68530
commit f6db232ca7
4 changed files with 16 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
ekman/fs-work/default.nix
View File

@@ -25,6 +25,10 @@ in {
# services.udev.extraRules = ''
# KERNEL=="ibp65s0", SUBSYSTEM=="net", ATTR{create_child}:="0x7666"
# '';
security.sudo.extraConfig = ''
%sif ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
%admin ALL=(admin) NOPASSWD: ALL
'';
environment.systemPackages = with pkgs; [
rdma-core
@@ -40,9 +44,9 @@ in {
users = true;
opt = true;
work = false;
data = false;
data = true;
ceph = true;
backup = false;
ceph = false;
};
};

6
ekman/login/default.nix
View File

@@ -283,9 +283,11 @@ in
# };
# };
# security.sudo.extraConfig = ''
security.sudo.extraConfig = ''
%sif ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
%admin ALL=(admin) NOPASSWD: ALL
# gitlab-runner ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
# '';
'';
security.pam = {
services.sshd.googleAuthenticator.enable = true;

4
modules/hpc/hpc.nix
View File

@@ -82,10 +82,6 @@ let
turbovnc
emacs
];
security.sudo.extraConfig = ''
%sif ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
%admin ALL=(admin) NOPASSWD: ALL
'';
};
compute = {

6
rossby/login/default.nix
View File

@@ -278,9 +278,11 @@ in
# };
# };
# security.sudo.extraConfig = ''
security.sudo.extraConfig = ''
%sif ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
%admin ALL=(admin) NOPASSWD: ALL
# gitlab-runner ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
# '';
'';
security.pam = {
services.sshd.googleAuthenticator.enable = true;