Help needed with nix `trusted-users` behaviour

Development Security
1

Hi,

I opened nix copy --no-check-sigs fails for trusted user · Issue #3873 · NixOS/nix · GitHub because I’m facing a strange behaviour from nix 2.3.7, where even as I set my user to be trusted (in /etc/nix/nix.conf on multi-user installation on top of CentOS 8.1), it still is not. I would like to rule nix out of this equation if possible, but my C++ is quite non-existent, and I’m having a hard time doing this by myself.

Could anyone give this a quick check and tell me I’m most likely wrong? This would help making progress and looking at other potential sources of errors (but I’m running low on alternative probable sources of errors :))

1 Like
2

@MartinJ, any progress on that ?
I am asking bc I have observed slightly similar behaviour only that in my case settings in user-defined nix.confs have no effect whatsoever as long as not setting them in /etc/nix/nix.conf directly.

3

Hi, we did not fix this, just worked around it.

4

Best to avoid trusted-users, it gives you passwordless root.
https://github.com/NixOS/nix/issues/9649#issuecomment-1868001568

2 Likes