51 lines
1.5 KiB
Nix
51 lines
1.5 KiB
Nix
# this allows logging in as root without password.
|
|
|
|
# This module is shared by the iso configuration and the system configuration
|
|
# which is build by the test
|
|
|
|
{pkgs, config, ...}:
|
|
|
|
let
|
|
doOverride = pkgs.lib.mkOverrideTemplate 0 {};
|
|
in
|
|
|
|
{
|
|
|
|
services.openssh = {
|
|
enable = true;
|
|
permitRootLogin = "yes";
|
|
};
|
|
jobs.sshd = {
|
|
startOn = doOverride "started network-interfaces";
|
|
};
|
|
|
|
boot.initrd.kernelModules =
|
|
["cifs" "virtio_net" "virtio_pci" "virtio_blk" "virtio_balloon" "nls_utf8"];
|
|
|
|
environment.systemPackages = [ pkgs.vim_configurable ];
|
|
|
|
# FIXME: rewrite pam.services the to be an attr list
|
|
# I only want to override sshd
|
|
security.pam.services = doOverride
|
|
# Most of these should be moved to specific modules.
|
|
[ { name = "cups"; }
|
|
{ name = "ejabberd"; }
|
|
{ name = "ftp"; }
|
|
{ name = "lshd"; rootOK =true; allowNullPassword =true; }
|
|
{ name = "passwd"; }
|
|
{ name = "samba"; }
|
|
{ name = "sshd"; rootOK = true; allowNullPassword =true; }
|
|
{ name = "xlock"; }
|
|
{ name = "chsh"; rootOK = true; }
|
|
{ name = "su"; rootOK = true; forwardXAuth = true; }
|
|
# Note: useradd, groupadd etc. aren't setuid root, so it
|
|
# doesn't really matter what the PAM config says as long as it
|
|
# lets root in.
|
|
{ name = "useradd"; rootOK = true; }
|
|
# Used by groupadd etc.
|
|
{ name = "shadow"; rootOK = true; }
|
|
{ name = "login"; ownDevices = true; allowNullPassword = true; }
|
|
];
|
|
|
|
}
|