colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

modules/persist: remove extraneous "nosuid" flag from gocryptfs mounts

Browse Source 
it was logging noisily
This commit is contained in:
Colin
2025-06-02 08:27:51 +00:00
parent 6ddac6b3f2
commit 39ec9f5cfb
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/persist/stores/ephemeral/default.nix
View File

@@ -10,7 +10,7 @@ let
fsType = "fuse3.sane"; fsType = "fuse3.sane";
options = [ options = [
"nodev" # only works via mount.fuse; gocryptfs requires this be passed as `-ko nodev` "nodev" # only works via mount.fuse; gocryptfs requires this be passed as `-ko nodev`
"nosuid" # only works via mount.fuse; gocryptfs requires this be passed as `-ko nosuid` (also, nosuid is default) # "nosuid" # only works via mount.fuse; gocryptfs requires this be passed as `-ko nosuid` (also, nosuid is default)
"allow_other" # root ends up being the user that mounts this, so need to make it visible to other users. "allow_other" # root ends up being the user that mounts this, so need to make it visible to other users.
# "defaults" # "unknown flag: --defaults. Try 'gocryptfs -help'" # "defaults" # "unknown flag: --defaults. Try 'gocryptfs -help'"
"pass_fuse_fd" "pass_fuse_fd"

2
modules/persist/stores/private/default.nix
View File

@@ -13,7 +13,7 @@ let
"nofail" "nofail"
# "noexec" # handful of scripts in ~/knowledge that are executable # "noexec" # handful of scripts in ~/knowledge that are executable
"nodev" # only works via mount.fuse; gocryptfs requires this be passed as `-ko nodev` "nodev" # only works via mount.fuse; gocryptfs requires this be passed as `-ko nodev`
"nosuid" # only works via mount.fuse; gocryptfs requires this be passed as `-ko nosuid` (also, nosuid is default) # "nosuid" # only works via mount.fuse; gocryptfs requires this be passed as `-ko nosuid` (also, nosuid is default)
"allow_other" # root ends up being the user that mounts this, so need to make it visible to other users. "allow_other" # root ends up being the user that mounts this, so need to make it visible to other users.
# "quiet" # "quiet"
# "defaults" # "unknown flag: --defaults. Try 'gocryptfs -help'" # "defaults" # "unknown flag: --defaults. Try 'gocryptfs -help'"