56de2bcd43
https://github.com/NixOS/nixpkgs/blob/master/pkgs/stdenv/generic/setup.sh#L948 this can do it nicely. Signed-off-by: Anton Arapov <anton@deadbeef.mx>
4 lines
256 B
Nix
4 lines
256 B
Nix
{ cert, group, groups, user }: {
|
|
assertion = cert.group == group || builtins.any (u: u == user) groups.${cert.group}.members;
|
|
message = "Group for certificate ${cert.domain} must be ${group}, or user ${user} must be a member of group ${cert.group}";
|
|
}
|