From df7f5a45da6b22559048b5454001517ba571fa06 Mon Sep 17 00:00:00 2001
From: Artemis Tosini <me@artem.ist>
Date: Sun, 3 Dec 2023 05:38:20 +0000
Subject: [PATCH] builder: do not set build user as trusted

---
 flake.lock       | 18 +++++++++---------
 sets/builder.nix |  1 -
 2 files changed, 9 insertions(+), 10 deletions(-)

diff --git a/flake.lock b/flake.lock
index 0685ae2..fced884 100644
--- a/flake.lock
+++ b/flake.lock
@@ -245,11 +245,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1701437885,
-        "narHash": "sha256-Ak69pOVFjZgia5ZzAXZSkRSEdTHNUDK+qEzlgXw/vaQ=",
+        "lastModified": 1701524494,
+        "narHash": "sha256-dXNCIUWm8Z74PijQ/THFb3HXQtRc2VA6LJvT+VrjZoY=",
         "owner": "jovian-experiments",
         "repo": "jovian-nixos",
-        "rev": "c6a62145fefbe0e48bc45d714499512a4780f4f1",
+        "rev": "365027ec7dc32018b20d3fbe3abf645406651e4c",
         "type": "github"
       },
       "original": {
@@ -316,11 +316,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1700968077,
-        "narHash": "sha256-Lax+2g7G3Fe+ckMrHLYTl+97unbmNDmN1qS9MLBkxr4=",
+        "lastModified": 1701572887,
+        "narHash": "sha256-oCPwQZT0Inis4zcYhtFHUp7Rym1zglKPLDcRird35q8=",
         "owner": "nix-community",
         "repo": "nix-index-database",
-        "rev": "bd3aec0ecb0fdde863a7ed2c6caa220c47e22c07",
+        "rev": "41afa8d1c061beda68502bcc67f2788f3a77042b",
         "type": "github"
       },
       "original": {
@@ -404,11 +404,11 @@
         "pre-commit-hooks": "pre-commit-hooks"
       },
       "locked": {
-        "lastModified": 1701379698,
-        "narHash": "sha256-u4wV7iI5XCMkj/BSyr9sih9WgevnYhw01nFWAerFEGE=",
+        "lastModified": 1701545368,
+        "narHash": "sha256-AzE7T/aRj/3kJ6nKJZ4zxuPpSJ+NvU8NpTUS7ipbonA=",
         "owner": "nix-community",
         "repo": "nixvim",
-        "rev": "28fc85484ab827912b1785484dd709c62d9a8237",
+        "rev": "741dd36395236f34dbe35a2db79a711c6b318ce4",
         "type": "github"
       },
       "original": {
diff --git a/sets/builder.nix b/sets/builder.nix
index e6fb4a1..e68c4e6 100644
--- a/sets/builder.nix
+++ b/sets/builder.nix
@@ -1,7 +1,6 @@
 { ... }:
 
 {
-  nix.settings.trusted-users = [ "build" ];
   users.users.build = {
     isSystemUser = true;
     home = "/home/build";