about summary refs log tree commit diff
path: root/ops
diff options
context:
space:
mode:
authorFlorian Klink <flokli@flokli.de>2022-05-07T19·06+0200
committerclbot <clbot@tvl.fyi>2022-05-08T13·52+0000
commite8855f4befb91df25ac1d0c835864735ef91965a (patch)
tree7c56bd6b11615281b65769bde0a958bfc66578a3 /ops
parent84c62eb68b16af02a84f310e7b3bc05e6794aaf7 (diff)
feat(ops/modules/open_eid.nix): document firefox r/4017
Firefox users can add p11-kit-proxy (or other SecurityDevices)
system-wide, by making use of the extraPolicies functionality.

Change-Id: Id58b6cab425199fb0e09e846db2a86d302c0de0d
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5534
Reviewed-by: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
Autosubmit: flokli <flokli@flokli.de>
Diffstat (limited to 'ops')
-rw-r--r--ops/modules/open_eid.nix3
1 files changed, 3 insertions, 0 deletions
diff --git a/ops/modules/open_eid.nix b/ops/modules/open_eid.nix
index b073790d5c..9fd3259331 100644
--- a/ops/modules/open_eid.nix
+++ b/ops/modules/open_eid.nix
@@ -9,6 +9,9 @@ let
   #
   # https://bugs.chromium.org/p/chromium/issues/detail?id=16387
   #
+  # Firefox users can just set
+  # extraPolicies.SecurityDevices.p11-kit-proxy "${pkgs.p11-kit}/lib/p11-kit-proxy.so";
+  # when overriding the firefox derivation.
   setup-browser-eid = pkgs.writeShellScriptBin "setup-browser-eid" ''
     NSSDB="''${HOME}/.pki/nssdb"
     mkdir -p ''${NSSDB}