fix: don't sudo nix build in remote scripts #45

2026-07-23T00:13:42Z

beatzaplenty commented

2026-07-23 00:13:42 +00:00

nix build runs through the nix daemon and doesn't need root; the
tooling-check step already confirms the SSH user can run nix directly
(ensure_nix_profile + command -v nix). sudo without a TTY blocks
non-interactive SSH heredoc sessions with "a terminal is required".

Keep sudo on pct/qm/pvesh (cluster IPC) and the disko image-writer
script (writes to block devices) -- those actually require root.

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

nix build runs through the nix daemon and doesn't need root; the tooling-check step already confirms the SSH user can run nix directly (ensure_nix_profile + command -v nix). sudo without a TTY blocks non-interactive SSH heredoc sessions with "a terminal is required". Keep sudo on pct/qm/pvesh (cluster IPC) and the disko image-writer script (writes to block devices) -- those actually require root. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

beatzaplenty added 1 commit 2026-07-23 00:13:42 +00:00

fix: don't sudo nix build in remote scripts

Check NixOS configurations / eval-hosts (pull_request) Successful in 10m33s

Details

8a282ee32e

nix build runs through the nix daemon and doesn't need root; the
tooling-check step already confirms the SSH user can run nix directly
(ensure_nix_profile + command -v nix). sudo without a TTY blocks
non-interactive SSH heredoc sessions with "a terminal is required".

Keep sudo on pct/qm/pvesh (cluster IPC) and the disko image-writer
script (writes to block devices) -- those actually require root.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

beatzaplenty merged commit cbf1239be4 into main

2026-07-23 00:13:52 +00:00

This repo is archived. You cannot comment on pull requests.

1 Participants

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: beatzaplenty/nixos#45