Ophestra
297b444dfb
All checks were successful
Test / Create distribution (push) Successful in 26s
Test / Sandbox (push) Successful in 1m42s
Test / Fortify (push) Successful in 2m39s
Test / Sandbox (race detector) (push) Successful in 2m52s
Test / Fpkg (push) Successful in 3m37s
Test / Fortify (race detector) (push) Successful in 4m17s
Test / Flake checks (push) Successful in 1m6s
Signed-off-by: Ophestra <cat@gensokyo.uk>
77 lines
1.7 KiB
Nix
77 lines
1.7 KiB
Nix
{
|
|
lib,
|
|
pkgs,
|
|
config,
|
|
...
|
|
}:
|
|
let
|
|
testProgram = pkgs.callPackage ./tool/package.nix { inherit (config.environment.fortify.package) version; };
|
|
testCases = import ./case lib testProgram;
|
|
in
|
|
{
|
|
users.users = {
|
|
alice = {
|
|
isNormalUser = true;
|
|
description = "Alice Foobar";
|
|
password = "foobar";
|
|
uid = 1000;
|
|
};
|
|
};
|
|
|
|
home-manager.users.alice.home.stateVersion = "24.11";
|
|
|
|
# Automatically login on tty1 as a normal user:
|
|
services.getty.autologinUser = "alice";
|
|
|
|
environment = {
|
|
systemPackages = with pkgs; [
|
|
# For checking seccomp outcome:
|
|
testProgram
|
|
];
|
|
|
|
variables = {
|
|
SWAYSOCK = "/tmp/sway-ipc.sock";
|
|
WLR_RENDERER = "pixman";
|
|
};
|
|
};
|
|
|
|
# Automatically configure and start Sway when logging in on tty1:
|
|
programs.bash.loginShellInit = ''
|
|
if [ "$(tty)" = "/dev/tty1" ]; then
|
|
set -e
|
|
|
|
mkdir -p ~/.config/sway
|
|
(sed s/Mod4/Mod1/ /etc/sway/config &&
|
|
echo 'output * bg ${pkgs.nixos-artwork.wallpapers.simple-light-gray.gnomeFilePath} fill' &&
|
|
echo 'output Virtual-1 res 1680x1050') > ~/.config/sway/config
|
|
|
|
sway --validate
|
|
systemd-cat --identifier=session sway && touch /tmp/sway-exit-ok
|
|
fi
|
|
'';
|
|
|
|
programs.sway.enable = true;
|
|
|
|
virtualisation.qemu.options = [
|
|
# Need to switch to a different GPU driver than the default one (-vga std) so that Sway can launch:
|
|
"-vga none -device virtio-gpu-pci"
|
|
|
|
# Increase performance:
|
|
"-smp 8"
|
|
];
|
|
|
|
environment.fortify = {
|
|
enable = true;
|
|
stateDir = "/var/lib/fortify";
|
|
users.alice = 0;
|
|
|
|
home-manager = _: _: { home.stateVersion = "23.05"; };
|
|
|
|
apps = [
|
|
testCases.preset
|
|
testCases.tty
|
|
testCases.mapuid
|
|
];
|
|
};
|
|
}
|