| matthewcroughan: https://github.com/NixOS/nixpkgs/pull/453557/commits/f3b1b7752116a278b0d9e63b956cb44b832941fa @Sigmanificient has managed to make the musl build work, and forcing the musl version of the package still has a succeeding test:
diff --git a/nixos/tests/login-nosuid.nix b/nixos/tests/login-nosuid.nix
index cdd14478d02c..7f6242294fe0 100644
--- a/nixos/tests/login-nosuid.nix
+++ b/nixos/tests/login-nosuid.nix
@@ -21,6 +21,8 @@
security.enableWrappers = false;
security.pwaccess.enable = true;
+ security.pwaccess.package = pkgs.pkgsMusl.pwaccess;
+
environment.systemPackages = [ pkgs.which ];
# pam debug without giant rebuild
So, you may be able to just take that whole PR, set security.pwaccess.enable = true; and security.enableWrappers = false;, and then have suid-less login!
|