From f728b584a2297a2a61b826459f15a8289fa9ca3b Mon Sep 17 00:00:00 2001
From: Daniel Barlow <dan@telent.net>
Date: Sun, 13 Apr 2025 23:00:47 +0100
Subject: [PATCH] add "nobody" user needed by rp-pppoe

---
 modules/ppp/default.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/modules/ppp/default.nix b/modules/ppp/default.nix
index b7d82e28..10c5a853 100644
--- a/modules/ppp/default.nix
+++ b/modules/ppp/default.nix
@@ -132,6 +132,16 @@ in
         description = "options supplied on ppp command line";
       };
     };
+
+    # rp-pppoe attempts to drop privs by switching to user "nobody"
+    users.nobody = {
+      uid = 65534;
+      gid = 65534;
+      gecos = "Captain Nemo";
+      dir = "/run/";
+      shell = "/bin/false";
+    };
+
     kernel = {
       config = {
         PPP = "y";