From 1278d56d716d857b945bd8c38e59c5625f4281dc Mon Sep 17 00:00:00 2001
From: r-vdp <ramses@well-founded.dev>
Date: Mon, 5 May 2025 11:16:02 +0200
Subject: [PATCH] nixos/udev: verify all udev rules using udevadm

---
 nixos/modules/services/hardware/udev.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/nixos/modules/services/hardware/udev.nix b/nixos/modules/services/hardware/udev.nix
index 1284dc86f0a7..b122c1f65807 100644
--- a/nixos/modules/services/hardware/udev.nix
+++ b/nixos/modules/services/hardware/udev.nix
@@ -55,6 +55,10 @@ let
         preferLocalBuild = true;
         allowSubstitutes = false;
         packages = lib.unique (map toString udevPackages);
+
+        nativeBuildInputs = [
+          pkgs.systemdMinimal
+        ];
       }
       ''
         mkdir -p $out
@@ -147,6 +151,11 @@ let
           exit 1
         fi
 
+        # Verify all the udev rules
+        echo "Verifying udev rules using udevadm verify..."
+        udevadm verify --resolve-names=never --no-style $out
+        echo "OK"
+
         # If auto-configuration is disabled, then remove
         # udev's 80-drivers.rules file, which contains rules for
         # automatically calling modprobe.