hardware-amazon conflicts with common

[Pandapip1]

srvos/nixos/common/sudo.nix

Lines 18 to 23 in 59e4d88

	[
	{
	assertion = config.security.sudo.execWheelOnly -> validUserGroups;
	message = "Some definitions in `security.sudo.extraRules` refer to users other than 'root' or groups other than 'wheel'. Disable `config.security.sudo.execWheelOnly`, or adjust the rules.";
	}
	];

is triggered by

https://github.com/NixOS/nixpkgs/blob/02b5eec8cb2b350925debe86f2d5025c1a09a44b/nixos/modules/services/misc/amazon-ssm-agent.nix#L22-L30

Setting users.users.ssm-user.extraGroups = [ "wheel" ]; does not help.

[sedlund]

security.sudo.execWheelOnly = lib.mkForce false;

[Pandapip1]

Yup, ideally I'd like to keep it true though. Any chance the check could be updated to:

1. Mention the group or user that isn't root or wheel
2. Check that the user doesn't have the wheel group?

Thanks!

[Pandapip1]

Bump