From 6bf31e521e18c1a9ea02699637a1be2301586c3e Mon Sep 17 00:00:00 2001 From: Silvan Mosberger Date: Fri, 10 Nov 2023 06:51:56 +0100 Subject: [PATCH 1/2] nixos/fwupd: Don't use DynamicUser Was introduced in dde6a4f397532bbd01b346466ea751e7c3cd9d06 but it doesn't work on my machine: fwupdmgr[439074]: Failed to connect to daemon: The connection is closed Creating a persistent user does work however --- nixos/modules/services/hardware/fwupd.nix | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/nixos/modules/services/hardware/fwupd.nix b/nixos/modules/services/hardware/fwupd.nix index 7a938459d0cb..d0c9e6c66e57 100644 --- a/nixos/modules/services/hardware/fwupd.nix +++ b/nixos/modules/services/hardware/fwupd.nix @@ -187,13 +187,18 @@ in { # fwupd-refresh expects a user that we do not create, so just run with DynamicUser # instead and ensure we take ownership of /var/lib/fwupd services.fwupd-refresh.serviceConfig = { - DynamicUser = true; StateDirectory = "fwupd"; }; timers.fwupd-refresh.wantedBy = [ "timers.target" ]; }; + users.users.fwupd-refresh = { + isSystemUser = true; + group = "fwupd-refresh"; + }; + users.groups.fwupd-refresh = {}; + security.polkit.enable = true; }; From 4587db727986b3fad616409da31f1a8a0d94c6da Mon Sep 17 00:00:00 2001 From: Silvan Mosberger Date: Fri, 10 Nov 2023 06:54:45 +0100 Subject: [PATCH 2/2] nixos/fwupd: Don't ignore stderr --- nixos/modules/services/hardware/fwupd.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/nixos/modules/services/hardware/fwupd.nix b/nixos/modules/services/hardware/fwupd.nix index d0c9e6c66e57..7b6c336bd221 100644 --- a/nixos/modules/services/hardware/fwupd.nix +++ b/nixos/modules/services/hardware/fwupd.nix @@ -188,6 +188,8 @@ in { # instead and ensure we take ownership of /var/lib/fwupd services.fwupd-refresh.serviceConfig = { StateDirectory = "fwupd"; + # Better for debugging, upstream sets stderr to null for some reason.. + StandardError = "inherit"; }; timers.fwupd-refresh.wantedBy = [ "timers.target" ];