global(fs): ensure /var/lib/private mode

This commit is contained in:
514fpv 2024-03-14 17:40:56 +08:00
parent a59424d635
commit 837b1922a3
Signed by: koishi
SSH key fingerprint: SHA256:652+A2yCgByK6j4+urGiApE+tZbISyelwTnr76Tm+x8

View file

@ -90,5 +90,10 @@ in {
inherit (cfg.cryptsetup) allowDiscards bypassWorkqueues;
device = "/dev/disk/by-uuid/${uuid}";
}) cfg.cryptsetup.uuids);
environment.persistence."/nix/persist/fhs".files = [ {
file = "/var/lib/private/mode";
parentDirectory.mode = "0700";
} ];
};
}