infra/nix/os/devices/steveej-nuc7pjyh-work/user.nix

{
  config,
  pkgs,
  ...
}: let
  passwords = import ../../../variables/passwords.crypt.nix;
  keys = import ../../../variables/keys.nix;
  inherit (import ../../lib/default.nix {}) mkUser;
in {
  users.extraUsers.sjunker = mkUser {
    uid = 1001;
    openssh.authorizedKeys.keys = keys.users.steveej.openssh;
    shell = pkgs.posh {
      image = "quay.io/enarx/fedora";
      run_args = "-v /dev/sgx:/dev/sgx";
    };
    extraGroups = ["sgx"];

    subUidRanges = [
      {
        startUid = 100000;
        count = 65536;
      }
    ];
    subGidRanges = [
      {
        startGid = 100000;
        count = 65536;
      }
    ];
  };
}