Repository navigation
Add Nix installation and NixOS integration - #7
Merged
Merged
Conversation
S-022: build, run, and develop syauth through a flake on x86-64 and ARM64 Linux. The package derivation runs the Rust workspace test suite and installs the CLI, daemon, and PAM module. The development shell supplies the pinned fenix toolchain plus the git-hooks checks. S-023: nixosModules.default configures one desktop account, its private store, and a restricted systemd user unit. PAM changes are opt-in per service and support a control override and module arguments. nix/check.nix evaluates the generated configuration. Docs: add the Nix how-to and module option reference, and record both journeys in the roadmap.
xBLACKICEx
changed the title
xBLACKICEx
marked this pull request as draft
November 7, 2026 12:55
xBLACKICEx
marked this pull request as ready for review
November 7, 2026 14:07
Contributor
Author
|
@dmytrogajewski |
Merge origin/master and retain the Nix documentation alongside the current repository and release links. Supply isolated D-Bus test configuration, development-shell runtime dependencies, and the upstream service restart policy. Validated with nix flake check, CLI version, make lint, 460 Rust tests, 52 Python tests, pre-commit hooks, and strict docs build.
Collaborator
|
Thanks @xBLACKICEx for contributing the Nix package and NixOS integration, and for documenting the setup! I rebased the branch onto the audit ownership fix in #9 and added automatic PAM socket configuration, validation for missing socket arguments, and a booted NixOS integration test in CI. The combined VM tests and all CI checks now pass, including installation/removal, signed approvals, password fallback, account isolation, and disable/rollback preserving bonds. Merging this for syauth 0.3.0. Thank you for bringing NixOS support to the project. |
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds Nix support for installing syauth and configuring it on NixOS.
Changes
The PAM control defaults to
sufficient, matching the existing Linux installer. No PAM services are modified by default.Validation
Tested and currently in use on my NixOS system.
nix flake checkand CLI version check passed.make build,make lint, and all pre-commit hooks passed.The non-fatal
cargo auditstep could not fetch the RustSec database;cargo denypassed. Release-script tests required OpenSSL supplied separately. Automated live-phone authentication and documentation browser checks were not run.