Merge pull request 'container-test: disable UsePam for ssh' (#3795) from use-pam into main

Reviewed-on: https://git.clan.lol/clan/clan-core/pulls/3795

checks/admin/default.nix

@@ -40,10 +40,7 @@ clanLib.test.makeTestClan {
         client.environment.etc.private-test-key.source = ./private-test-key;
 
         server = {
-          services.openssh = {
-            enable = true;
-            settings.UsePAM = false;
-          };
+          services.openssh.enable = true;
         };
       };
 

lib/test/container-test-driver/nixos-module.nix

@@ -10,6 +10,9 @@
   virtualisation.sharedDirectories = lib.mkForce { };
   networking.useDHCP = false;
 
+  # PAM requires setuid and doesn't work in our containers
+  services.openssh.settings.UsePAM = false;
+
   # We use networkd to assign static ip addresses
   networking.useNetworkd = true;
   services.resolved.enable = false;