nixos/systemd: fix service sshd-vsock@ (#508855)

2026-04-11 10:46:21 +00:00
parent 3a9ff420af eaa2277e8d
commit 205b13add2
1 changed files with 8 additions and 0 deletions
@@ -876,6 +876,14 @@ in
        pamMount = false;
      };
    };
+
+    # the systemd vmspawn credential dropin executes sshd and expects ExecSearchPath to be set, see:
+    # https://github.com/systemd/systemd/blob/v259.3/src/vmspawn/vmspawn.c#L2662
+    # this service is used, for example, when NixOS is started via systemd-vmspawn
+    systemd.services."sshd-vsock@" = mkIf config.services.openssh.enable {
+      serviceConfig.ExecSearchPath = "${config.services.openssh.package}/bin";
+      overrideStrategy = "asDropin";
+    };
  };

  # FIXME: Remove these eventually.