colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

persist: remove the nosuid flag since gocryptfs cant parse it here

Browse Source
This commit is contained in:
Colin 2023-09-13 05:13:43 +00:00
parent f54d5a68ff
commit 910d0fa59e
2 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/persist/stores/crypt.nix
View File

@ -22,8 +22,8 @@ lib.mkIf config.sane.persist.enable
fsType = "fuse.gocryptfs";
options = [
"nodev"
"nosuid"
"allow_other"
# "nosuid" # "Unknown parameter 'nosuid'". gocryptfs requires this be passed as `-ko nosuid` (also, nosuid is default)
"allow_other" # root ends up being the user that mounts this, so need to make it visible to other users.
"passfile=${key}"
# "defaults" # "unknown flag: --defaults. Try 'gocryptfs -help'"
];

7
modules/persist/stores/private.nix
View File

@ -31,10 +31,11 @@ lib.mkIf config.sane.persist.enable
options = [
"noauto" # don't try to mount, until the user logs in!
"nofail"
"allow_other" # root ends up being the user that mounts this, so need to make it visible to other users.
"nodev"
"nosuid"
"quiet"
# "noexec" # handful of scripts in ~/private/knowledge that are executable
# "nosuid" # "Unknown parameter 'nosuid'". gocryptfs requires this be passed as `-ko nosuid` (also nosuid is default)
"allow_other" # root ends up being the user that mounts this, so need to make it visible to other users.
# "quiet"
# "defaults" # "unknown flag: --defaults. Try 'gocryptfs -help'"
];
noCheck = true;