Log all polkit actions to find action.id for nixos-rebuild

I would like to setup a polkit rule to allow `buildkite-agent` (i.e. a
forthcoming user) to call `nixos-rebuild`. I need to know the `action.id` before
I can write a reliable rule.

1 files changed, 6 insertions, 0 deletions

diff --git a/nixos/socrates/configuration.nix b/nixos/socrates/configuration.nix
index b9d2b23485bb..469e2f45dccc 100644
--- a/nixos/socrates/configuration.nix
+++ b/nixos/socrates/configuration.nix
@@ -163,6 +163,12 @@ in {
   # lid.
   services.logind.lidSwitch = "ignore";
 
+  security.polkit.extraConfig = ''
+    polkit.addRule(function(action, subject) {
+      polkit.log("subject.user: " + subject.user + " is attempting action.id: " + action.id);
+    });
+  '';
+
   # Provision SSL certificates to support HTTPS connections.
   security.acme.acceptTerms = true;
   security.acme.email = "wpcarro@gmail.com";