fix(security): remove container daemon group access

2026-09-09 19:32:05 +02:00 · 2026-09-01 19:17:39 +08:00
parent dc261e2934
commit 13436c0c31
3 changed files with 12 additions and 2 deletions
@@ -34,8 +34,6 @@
      "users"
      "wheel"
      "networkmanager" # for nmtui / nm-connection-editor
-      "podman"
-      "docker"
      "wireshark"
      "adbusers" # android debugging
      "libvirtd" # virt-viewer / qemu
@@ -0,0 +1,4 @@
+{
+  userHasDockerAccess = false;
+  userHasPodmanAccess = false;
+}
@@ -0,0 +1,8 @@
+{ outputs, ... }:
+let
+  userGroups = outputs.nixosConfigurations.ai-niri.config.users.users.ryan.extraGroups;
+in
+{
+  userHasDockerAccess = builtins.elem "docker" userGroups;
+  userHasPodmanAccess = builtins.elem "podman" userGroups;
+}