陈大猫 907f60616b fix(nix): work around bwrap ssh config owner check for home-manager (#4192) ...

* fix(nix): work around bwrap ssh config owner check for home-manager

Unprivileged wrapType2/bwrap maps only the caller uid, so a home-manager
~/.ssh/config symlink into the nix store appears as overflowuid 65534.
OpenSSH then rejects the default user config and the Mosh handshake
never sees MOSH CONNECT. Inject an ssh wrapper via extraPkgs that
snapshots a badly owned config and execs nixpkgs OpenSSH with -F.

* fix(nix): always refresh ssh config snapshot for home-manager

Nix store files have normalized old mtimes, so a -nt check never
notices a newer home-manager generation after the first snapshot.

* fix(nix): publish ssh config snapshot atomically

cp truncates the destination before copying, so a concurrent ssh -F
reader can see an empty or partial config and ignore HostName,
identity, or proxy settings. Copy to a unique staging file and
rename it over the snapshot.

2026-11-09 01:46:36 +08:00

..

package.nix

fix(nix): work around bwrap ssh config owner check for home-manager (#4192)

2026-11-09 01:46:36 +08:00

release.nix

Update Nix release metadata for v1.1.90

2026-10-26 05:54:33 +00:00