sgx-nixos: disable autoupdate

Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
This commit is contained in:
Harald Hoyer 2024-01-11 16:50:13 +01:00
parent 1386b0157d
commit 6287b4592a

View file

@ -17,8 +17,6 @@ with lib.plusultra;
nix.settings.trusted-users = [ "@wheel" ];
#home-manager.enable = true;
programs = {
bash = {
## shellInit = ''
@ -33,7 +31,6 @@ with lib.plusultra;
fish.enable = true;
};
# Bootloader.
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
@ -72,20 +69,6 @@ with lib.plusultra;
xkbVariant = "";
};
# Define a user account. Don't forget to set a password with passwd.
# users.users.harald = {
# isNormalUser = true;
# description = "harald";
# extraGroups = [ "networkmanager" "wheel" ];
# packages = with pkgs; [ ];
# openssh.authorizedKeys.keys = [
# "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIDsb/Tr69YN5MQLweWPuJaRGm+h2kOyxfD6sqKEDTIwoAAAABHNzaDo= harald@fedora.fritz.box"
# "sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBACLgT81iB1iWWVuXq6PdQ5GAAGhaZhSKnveQCvcNnAOZ5WKH80bZShKHyAYzrzbp8IGwLWJcZQ7TqRK+qZdfagAAAAEc3NoOg== harald@hoyer.xyz"
# "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAYbUTKpy4QR3s944/hjJ1UK05asFEs/SmWeUbtS0cdA660sT4xHnRfals73FicOoz+uIucJCwn/SCM804j+wtM="
# "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMNsmP15vH8BVKo7bdvIiiEjiQboPGcRPqJK0+bH4jKD harald@lenovo.fritz.box"
# ];
# };
users.users.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMNsmP15vH8BVKo7bdvIiiEjiQboPGcRPqJK0+bH4jKD harald@lenovo.fritz.box"
"sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBACLgT81iB1iWWVuXq6PdQ5GAAGhaZhSKnveQCvcNnAOZ5WKH80bZShKHyAYzrzbp8IGwLWJcZQ7TqRK+qZdfagAAAAEc3NoOg== harald@hoyer.xyz"
@ -104,15 +87,13 @@ with lib.plusultra;
};
};
system.autoUpgrade = {
enable = true;
operation = "switch";
allowReboot = true;
# system.autoUpgrade = {
# enable = true;
# operation = "switch";
# allowReboot = true;
#flags = [ "--update-input" "nixpkgs" "--commit-lock-file" ]
# flake = "??";
};
# };
security = {
sudo = {