Had to create a wrapper to burn cd, is it expected?

bddh0 · January 24, 2026, 4:26pm

AI helped me with this one and allowed me to use Brasero to burn CD.

security.wrappers.cdrecord = {
source = “${pkgs.cdrtools}/bin/cdrecord”;
setuid = true;
owner = “root”;
group = “cdrom”;
};

Is it normal? I feel like it is weird to have to setup this

tejing · January 24, 2026, 4:32pm

The correct solution is probably just to add your user to the group that owns the cdrom device (and relog so the group change takes effect).

It’s also possible that you need to adjust the udev rules to control the permissions the device is created with, but it’s probably already writable by a cdrom group… mine is.

bddh0 · January 25, 2026, 8:24am

My user was already in cdrom group, I rebooted but still had to write this wrapper in configuration.nix. Maybe it is a cdrecord issue after all since other distro mentions it too Reddit - The heart of the internet

tejing · January 25, 2026, 1:15pm

Hmm… it does seem from the arch thread that setuid may actually be required. Nixos’ own k3b module seems to actually set up such wrappers, as well:

github.com/NixOS/nixpkgs

nixos/modules/programs/k3b.nix

a92fea90e


      
          security.wrappers = {
            cdrdao = {
              setuid = true;
              owner = "root";
              group = "cdrom";
              permissions = "u+wrx,g+x";
              source = "${pkgs.cdrdao}/bin/cdrdao";
            };
            cdrecord = {
              setuid = true;
              owner = "root";
              group = "cdrom";
              permissions = "u+wrx,g+x";
              source = "${pkgs.cdrtools}/bin/cdrecord";
            };
          };

There’s no brasero module in nixos, but based on what’s going on with k3b, perhaps there should be and it should do the same thing.