diff options
Diffstat (limited to '')
| -rw-r--r-- | ops/modules/open_eid.nix | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/ops/modules/open_eid.nix b/ops/modules/open_eid.nix index 112e5827f5..e3e686f3f6 100644 --- a/ops/modules/open_eid.nix +++ b/ops/modules/open_eid.nix @@ -1,10 +1,28 @@ # NixOS module to configure the Estonian e-ID software. { pkgs, ... }: +let + # Wrapper script to add EID support to browsers. Each user needs to + # run this themselves, it does not work on a system level due to a + # bug in Chromium: + # + # https://bugs.chromium.org/p/chromium/issues/detail?id=16387 + # + # This is based on the upstream setup script for Debian-derivatives: + # https://github.com/open-eid/linux-installer/blob/master/esteid-update-nssdb + setup-browser-eid = pkgs.writeShellScriptBin "setup-browser-eid" '' + NSSDB="''${HOME}/.pki/nssdb" + mkdir -p ''${NSSDB} + + ${pkgs.nssTools}/bin/modutil -force -dbdir sql:$NSSDB -add opensc-pkcs11 \ + -libfile ${pkgs.opensc}/lib/onepin-opensc-pkcs11.so -mechanisms FRIENDLY + ''; +in { services.pcscd.enable = true; environment.systemPackages = with pkgs; [ qdigidoc + setup-browser-eid ]; } |