nixTrustWheel does disabled is not recognized when building on host system #21

New issue

Open

opened 2026-03-18 11:50:03 -07:00 by kaitotlex · 0 comments

kaitotlex commented

2026-03-18 11:50:03 -07:00

Owner

DOES NOT WORK

nixTrustWheel = lib.mkOption {
      type = lib.types.bool;
      default = cfg.disable;
      description = ''
        Whether to allow any user in the group `wheel` to manipulate the Nix store.

        WARNING: Enabling this option is equivalent to passwordless sudo, so any process running as your user can escalate to root at any time.
      '';
    };

PROPOSED FIX

nixTrustWheel = lib.mkOption {
      type = lib.types.bool;
      default = !cfg.nixSaneDefaults;
      description = ''
        Whether to allow any user in the group `wheel` to manipulate the Nix store.

        WARNING: Enabling this option is equivalent to passwordless sudo, so any process running as your user can escalate to root at any time.
      '';
    };

**DOES NOT WORK** ``` nix nixTrustWheel = lib.mkOption { type = lib.types.bool; default = cfg.disable; description = '' Whether to allow any user in the group `wheel` to manipulate the Nix store. WARNING: Enabling this option is equivalent to passwordless sudo, so any process running as your user can escalate to root at any time. ''; }; ``` **PROPOSED FIX** ``` nix nixTrustWheel = lib.mkOption { type = lib.types.bool; default = !cfg.nixSaneDefaults; description = '' Whether to allow any user in the group `wheel` to manipulate the Nix store. WARNING: Enabling this option is equivalent to passwordless sudo, so any process running as your user can escalate to root at any time. ''; }; ```