Commit 1fe7b0d24211

Vincent Demeester <vincent@sbr.pm>
2026-06-10 14:55:57
fix(aomi): add nscd for nix NSS/LDAP user resolution
Nix glibc can't load system NSS modules (libnss_sss.so) so nix-built programs like emacs can't resolve LDAP users. nscd bridges this gap by providing a socket that nix glibc queries directly. Also reverted the ExecStartPre workaround for emacs since nscd is the proper fix.
main
1 parent ef4c2bc
Changed files (1)
imperative
aomi
bootstrap.sh
imperative/aomi/bootstrap.sh
@@ -158,14 +158,19 @@ install_native_apps() {
 	log_info "Installing native apps..."
 
 	# Niri compositor + Wayland essentials + terminal
-	log_info "Installing niri, Wayland support, and kitty..."
+	log_info "Installing niri, Wayland support, kitty, and nscd..."
 	sudo dnf install -y \
 		niri \
 		kitty \
+		nscd \
 		xwayland-satellite \
 		xdg-desktop-portal-gnome \
 		xdg-desktop-portal-gtk
 
+	# nscd is required for nix-built programs to resolve LDAP/SSSD users
+	# Nix glibc can't load system NSS modules but can talk to nscd's socket
+	sudo systemctl enable --now nscd
+
 	# Flatpak apps (sandboxed, auto-updating)
 	if ! command -v flatpak &>/dev/null; then
 		log_info "Installing flatpak..."