Worktree ipa lxc kerberos fix

Conversation 0 Commits 2 Files Changed 4

+86 -48

2 Commits

Author	SHA1	Message	Date
beatzaplentyandClaude Sonnet 4.6	3589fc31d7	feat(ipa): add Home Manager config for IPA primary user Check NixOS configurations / eval-hosts (pull_request) Failing after 40m50s Details Any enrolled host now automatically gets a Home Manager profile for the IPA primary user (vars.ipaUser = "wayne"), covering what IPA doesn't: dotfiles, user-scoped packages (tmux, sshfs), and EDITOR variable. The home directory is pre-created by systemd-tmpfiles so HM activation succeeds on steady-state systems before first login; pam_mkhomedir remains as a fallback for fresh deploys where SSSD hasn't cached the user yet. A minimal users.users stub satisfies NixOS's assertion requirements (isNormalUser + group) that arise because home-manager.useUserPackages creates a users.users entry to install packages to /etc/profiles/per-user/. The stub is shadowed by SSSD at runtime (security.ipa sets passwd: sss files). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-07-28 12:53:10 +10:00
beatzaplentyandClaude Sonnet 4.6	89746718a9	feat(shell): make Switch-nix/Test-nix/buildImage system-wide IPA users (e.g. wayne@) don't get Home Manager so the aliases defined in aliases.nix were invisible to them. Move Switch-nix, Test-nix, and buildImage into programs.bash in configuration.nix so every user on every host gets them via /etc/bashrc. Stub out aliases.nix for future per-user HM-only additions. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-07-28 12:32:33 +10:00

Author

SHA1

Message

Date

beatzaplentyandClaude Sonnet 4.6

3589fc31d7

feat(ipa): add Home Manager config for IPA primary user

Check NixOS configurations / eval-hosts (pull_request) Failing after 40m50s

Details

Any enrolled host now automatically gets a Home Manager profile for the
IPA primary user (vars.ipaUser = "wayne"), covering what IPA doesn't:
dotfiles, user-scoped packages (tmux, sshfs), and EDITOR variable.

The home directory is pre-created by systemd-tmpfiles so HM activation
succeeds on steady-state systems before first login; pam_mkhomedir remains
as a fallback for fresh deploys where SSSD hasn't cached the user yet.

A minimal users.users stub satisfies NixOS's assertion requirements
(isNormalUser + group) that arise because home-manager.useUserPackages
creates a users.users entry to install packages to /etc/profiles/per-user/.
The stub is shadowed by SSSD at runtime (security.ipa sets passwd: sss files).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-28 12:53:10 +10:00

beatzaplentyandClaude Sonnet 4.6

89746718a9

feat(shell): make Switch-nix/Test-nix/buildImage system-wide

IPA users (e.g. wayne@) don't get Home Manager so the aliases defined in
aliases.nix were invisible to them. Move Switch-nix, Test-nix, and
buildImage into programs.bash in configuration.nix so every user on every
host gets them via /etc/bashrc. Stub out aliases.nix for future per-user
HM-only additions.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-28 12:32:33 +10:00

Worktree ipa lxc kerberos fix #85