Doas

doas 是一個以其他用戶（通常是超級用戶）身份執行命令的實用程序。由於其配置簡便、用法簡單，它通常被視作 sudo 的替代品。

It is not recommended to use doas due to compatibility issues with sudo.

Flake based configurations require git to be installed as a system package in order to rebuild.

Configuration

The following configuration will give the user foo the ability to execute commands as the super user via doas, while disabling the sudo command.

security.doas.enable = true;
security.sudo.enable = false;
security.doas.extraRules = [{
  users = ["foo"];
  # Optional, retains environment variables while running commands 
  # e.g. retains your NIX_PATH when applying your config
  keepEnv = true; 
  persist = true;  # Optional, don't ask for the password for some time, after a successfully authentication
}];