Skip to content

Commit

Permalink
fix(ssh): use openssh_gssapi package to allow for kerberos options
Browse files Browse the repository at this point in the history
In NixOS 24.11, the default openssh package no longer includes support
for these options to secure the attack surface (see release notes).
  • Loading branch information
diogotcorreia committed Nov 20, 2024
1 parent e77ac96 commit 8d52168
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions modules/personal.nix
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,9 @@ in {
usr.extraGroups = ["adbusers"];
programs.adb.enable = true;

# needed for GSSAPIAuthentication options for ssh
programs.ssh.package = pkgs.openssh_gssapi;

# ssh client config
hm.programs.ssh = {
enable = true;
Expand Down

0 comments on commit 8d52168

Please sign in to comment.