Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: NixOS/nixpkgs
base: 8d217ede5838
Choose a base ref
...
head repository: NixOS/nixpkgs
compare: d06f798ce784
Choose a head ref
  • 8 commits
  • 12 files changed
  • 2 contributors

Commits on Dec 21, 2018

  1. google-compute-engine-oslogin: init at 1.4.3

    @flokli
    flokli committed Dec 21, 2018
    Copy the full SHA
    fb41136 View commit details
    Browse the repository at this point in the history

  2. security.pam.services.<name?>.: add googleOsLogin(AccountVerification… 

    …|Authentication)
    @flokli
    flokli committed Dec 21, 2018
    Copy the full SHA
    be5ad77 View commit details
    Browse the repository at this point in the history

  3. config.security.googleOsLogin: add module 

    The OS Login package enables the following components:
AuthorizedKeysCommand to query valid SSH keys from the user's OS Login
profile during ssh authentication phase.
NSS Module to provide user and group information
PAM Module for the sshd service, providing authorization and
authentication support, allowing the system to use data stored in
Google Cloud IAM permissions to control both, the ability to log into
an instance, and to perform operations as root (sudo).
    @flokli
    flokli committed Dec 21, 2018
    Copy the full SHA
    c6de45c View commit details
    Browse the repository at this point in the history

  4. config.nsswitch: load cache_oslogin and oslogin nss modules if config… 

    ….security.googleOsLogin.enable is set
    @flokli
    flokli committed Dec 21, 2018
    Copy the full SHA
    04f3562 View commit details
    Browse the repository at this point in the history

  5. nixos/tests: add google-oslogin test

    @flokli
    flokli committed Dec 21, 2018
    Copy the full SHA
    0f46188 View commit details
    Browse the repository at this point in the history

  6. nixos/modules/virtualisation/google-compute-config.nix: remove google… 

    …-accounts-daemon

Use googleOsLogin for login instead.
This allows setting users.mutableUsers back to false, and to strip the
security.sudo.extraConfig.

security.sudo.enable is default anyhow, so we can remove that as well.
    @flokli
    flokli committed Dec 21, 2018
    Copy the full SHA
    706efad View commit details
    Browse the repository at this point in the history

  7. release-notes/rl-1903: add security.googleOsLogin

    @flokli
    flokli committed Dec 21, 2018
    Copy the full SHA
    3539f38 View commit details
    Browse the repository at this point in the history

Commits on Dec 24, 2018

  1. Merge pull request #51566 from adisbladis/google-oslogin 

    GCE OSLogin module: init
    @zimbatm
    zimbatm committed Dec 24, 2018
    Copy the full SHA
    d06f798 View commit details
    Browse the repository at this point in the history