Archived
Check NixOS configurations / eval-hosts (pull_request) Successful in 10m33s
nix build runs through the nix daemon and doesn't need root; the tooling-check step already confirms the SSH user can run nix directly (ensure_nix_profile + command -v nix). sudo without a TTY blocks non-interactive SSH heredoc sessions with "a terminal is required". Keep sudo on pct/qm/pvesh (cluster IPC) and the disko image-writer script (writes to block devices) -- those actually require root. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>