Doas

doas 是一個以其他用戶（通常是超級用戶）身份執行命令的實用程序。由於其配置簡便、用法簡單，它通常被視作 sudo 的替代品。 由於與 sudo 的兼容性問題，不建議使用 doas。 基於 Flake 的配置需要將 git 作為系統軟件安裝才能重新構建。

Configuration

The following configuration will give the user foo the ability to execute commands as the super user via doas, while disabling the sudo command.

security.doas.enable = true;
security.sudo.enable = false;
security.doas.extraRules = [{
  users = ["foo"];
  # Optional, retains environment variables while running commands 
  # e.g. retains your NIX_PATH when applying your config
  keepEnv = true; 
  persist = true;  # Optional, don't ask for the password for some time, after a successfully authentication
}];