diff --git a/config/hosts/samhain/nixos.nix b/config/hosts/samhain/nixos.nix index 61a5f945..334d0097 100644 --- a/config/hosts/samhain/nixos.nix +++ b/config/hosts/samhain/nixos.nix @@ -79,6 +79,15 @@ in { }; }; + + services.udev.extraRules = '' + SUBSYSTEM=="usb", ACTION=="add", ATTRS{idVendor}=="1532", ATTRS{idProduct}=="0067", GROUP="vfio" + SUBSYSTEM=="block", ACTION=="add", ATTRS{model}=="HFS256G32TNF-N3A", ATTRS{wwid}=="t10.ATA HFS256G32TNF-N3A0A MJ8BN15091150BM1Z ", OWNER="kat" + ''; + + # TODO: Replace this drive forward with one half of the 1.82TiB drive. + # SUBSYSTEM=="block", ACTION=="add", ATTR{partition}=="2", ATTR{size}=="1953503232", ATTRS{wwid}=="naa.5000039fe6e8614e", OWNER="kat" + # Networking networking = { diff --git a/config/profiles/vfio/default.nix b/config/profiles/vfio/default.nix index f9dead19..a9a1215b 100644 --- a/config/profiles/vfio/default.nix +++ b/config/profiles/vfio/default.nix @@ -45,15 +45,10 @@ with lib; services.udev.extraRules = '' SUBSYSTEM=="i2c-dev", GROUP="vfio", MODE="0660" - SUBSYSTEM=="usb", ACTION=="add", ATTRS{idVendor}=="1532", ATTRS{idProduct}=="0067", GROUP="vfio" SUBSYSTEM=="misc", KERNEL=="uinput", OPTIONS+="static_node=uinput", MODE="0660", GROUP="uinput" SUBSYSTEM=="vfio", OWNER="root", GROUP="vfio" - SUBSYSTEM=="block", ACTION=="add", ATTRS{model}=="HFS256G32TNF-N3A", ATTRS{wwid}=="t10.ATA HFS256G32TNF-N3A0A MJ8BN15091150BM1Z ", OWNER="kat" ''; - # TODO: Replace this drive forward with one half of the 1.82TiB drive. - # SUBSYSTEM=="block", ACTION=="add", ATTR{partition}=="2", ATTR{size}=="1953503232", ATTRS{wwid}=="naa.5000039fe6e8614e", OWNER="kat" - security.pam.loginLimits = [{ domain = "@vfio"; type = "-";