Doas/zh: Difference between revisions
No edit summary |
Created page with "== 配置 ==" |
||
| Line 2: | Line 2: | ||
由于与 sudo 的兼容性问题，不建议使用 doas。 | 由于与 sudo 的兼容性问题，不建议使用 doas。 | ||
基于 Flake 的配置需要将 git 作为系统软件安装才能重新构建。 | 基于 Flake 的配置需要将 git 作为系统软件安装才能重新构建。 | ||
< | <span id="Configuration"></span> | ||
== | == 配置 == | ||
<div lang="en" dir="ltr" class="mw-content-ltr"> | <div lang="en" dir="ltr" class="mw-content-ltr"> | ||
The following configuration will give the user <code>foo</code> the ability to execute commands as the super user via <code>doas</code>, while disabling the <code>sudo</code> command. | The following configuration will give the user <code>foo</code> the ability to execute commands as the super user via <code>doas</code>, while disabling the <code>sudo</code> command. | ||
Revision as of 19:05, 28 August 2025
doas 是一個以其他用戶（通常是超級用戶）身份執行命令的實用程序。由於其配置簡便、用法簡單，它通常被視作 sudo 的替代品。 由於與 sudo 的兼容性問題，不建議使用 doas。 基於 Flake 的配置需要將 git 作為系統軟體安裝才能重新構建。
配置
The following configuration will give the user foo the ability to execute commands as the super user via doas, while disabling the sudo command.
security.doas.enable = true;
security.sudo.enable = false;
security.doas.extraRules = [{
users = ["foo"];
# Optional, retains environment variables while running commands
# e.g. retains your NIX_PATH when applying your config
keepEnv = true;
persist = true; # Optional, don't ask for the password for some time, after a successfully authentication
}];