yadunut/clan-core
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

container-test: disable UsePam for ssh

Browse Source 
doesn't work without setuid, which we currently do not support.
This commit is contained in:
Jörg Thalheim
2025-05-30 11:53:13 +02:00
parent 610253d45e
commit 795ace408a
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
checks/admin/default.nix
View File

@@ -40,10 +40,7 @@ clanLib.test.makeTestClan {
client.environment.etc.private-test-key.source = ./private-test-key; client.environment.etc.private-test-key.source = ./private-test-key;
server = { server = {
services.openssh = { services.openssh.enable = true;
enable = true;
settings.UsePAM = false;
};
}; };
}; };

3
lib/test/container-test-driver/nixos-module.nix
View File

@@ -10,6 +10,9 @@
virtualisation.sharedDirectories = lib.mkForce { }; virtualisation.sharedDirectories = lib.mkForce { };
networking.useDHCP = false; networking.useDHCP = false;
# PAM requires setuid and doesn't work in our containers
services.openssh.settings.UsePAM = false;
# We use networkd to assign static ip addresses # We use networkd to assign static ip addresses
networking.useNetworkd = true; networking.useNetworkd = true;
services.resolved.enable = false; services.resolved.enable = false;