feat: nh doas wrapper only runs under root for commands that need root

youwen5 · Dec 30, 2024 · 71829db · 71829db
1 parent f3bc3dc
commit 71829db
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/hm/modules/linux/default.nix b/hm/modules/linux/default.nix
@@ -26,11 +26,12 @@
       # wrapper for nh as it doesn't work with `doas`
       body = ''
         if count $argv > /dev/null
-          if contains -- os $argv or contains -- clean $argv
-            doas ${pkgs.nh}/bin/nh $argv -R
-          else
-            ${pkgs.nh}/bin/nh $argv
-          end
+            set subcommand (string join " " $argv)
+            if contains -- $subcommand "os switch" "os test" "os boot" "clean all"
+                doas ${pkgs.nh}/bin/nh $argv -R
+            else
+                ${pkgs.nh}/bin/nh $argv
+            end
         else
             ${pkgs.nh}/bin/nh
         end