nixos/systemd: fix run0 failing to run commands (#419588)

2025-07-17 22:18:10 +02:00
parent aeca4b32b3 d54262911c
commit 71064c4808
1 changed files with 9 additions and 0 deletions
@@ -832,6 +832,15 @@ in
        minsize = "1M";
      };
    };
+
+    # run0 is supposed to authenticate the user via polkit and then run a command. Without this next
+    # part, run0 would fail to run the command even if authentication is successful and the user has
+    # permission to run the command. This next part is only enabled if polkit is enabled because the
+    # error that we’re trying to avoid can’t possibly happen if polkit isn’t enabled. When polkit isn’t
+    # enabled, run0 will fail before it even tries to run the command.
+    security.pam.services = mkIf config.security.polkit.enable {
+      systemd-run0 = { };
+    };
  };

  # FIXME: Remove these eventually.