In reply to @zhaofeng:zhaofeng.li
Ok, I just added the FIDO2 test by oxalica. There is one weird thing that I noticed, but other than that the PR seems ready to go.

In reply to @arianvp:matrix.org
Seems the cryptsetup test suite is not building on x86_64 for some reason https://logs.nix.ci/?key=nixos/nixpkgs.189676&attempt_id=dca5d82a-d384-48ab-b255-4cd435191024

In reply to @colemickens:matrix.org
K900 btw dont ask why I know this, but: https://www.freedesktop.org/software/systemd/man/pam_systemd.html

I've been hacking around with network-related functionality from https://github.com/NixOS/nixpkgs/pull/169116
and needed to add the following files for outgoing https to work:

    boot.initrd.environment.etc = {
      "resolv.conf".text = "nameserver 1.1.1.1";
      "ssl/certs/ca-certificates.crt".source = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
    };
    boot.initrd.systemd.storePaths = [
      # so nix can look up dns entries
      "${pkgs.glibc}/lib/libnss_dns.so.2"
    ];

Size increase is imho neglectable, so is this something you'd want to add to the PR ElvishJerricco ? (using network.namservers instead of 1.1.1.1 ofc)

I've been hacking around with network-related functionality from https://github.com/NixOS/nixpkgs/pull/169116
and needed to add the following files for outgoing https to work:

    boot.initrd.environment.etc = {
      "resolv.conf".text = "nameserver 1.1.1.1";
      "ssl/certs/ca-certificates.crt".source = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
    };
    boot.initrd.systemd.storePaths = [
      # so nix can look up dns entries
      "${pkgs.glibc}/lib/libnss_dns.so.2"
    ];

Size increase is imho neglectable, so is this something you'd consider for the PR ElvishJerricco ? (using network.namservers instead of 1.1.1.1 ofc)