Prevent containers from running non-container services

2026-02-22 18:18:05 -08:00
parent 4cf50b5fb1
commit 684851d641
3 changed files with 3 additions and 3 deletions
--- a/common/nix-builder.nix
+++ b/common/nix-builder.nix
@@ -12,7 +12,7 @@ let
 in
 lib.mkMerge [
  # configure builder
-  (lib.mkIf thisMachineIsABuilder {
+  (lib.mkIf (thisMachineIsABuilder && !config.boot.isContainer) {
    users.users.${builderUserName} = {
      description = "Distributed Nix Build User";
      group = builderUserName;