Description
Problem
When I read the man 5 nix.conf I can not see whether an option is available/setable by any "allowed" user or requires a "trusted" user for the option.
Eg. a user might want to add an substituter on the CLI providing --option extra-substituters … --option extra-trusted-public-keys … appropriately, but still sees a "ignored untrusted substituter" message.
They figure using sudo works, and might fall back to a "just use sudo for everything" behaviour, which in general is dangerous regardless of NixOS, Linux or Mac as the host.
Proposal
Add a remark to each option whether it can be set by any allowed user or if it requires to be a trusted user.
Also add a paragraph at the top that roughly explains the concept and/or refers to a man page that explains the concept of allowed and trusted users more in depth.
Checklist
- checked latest Nix manual (source)
- checked open documentation issues and pull requests for possible duplicates
Priorities
Add 👍 to issues you find important.