From e6a63393c8ec23a5462d86e377cac5ad02fb7a3a Mon Sep 17 00:00:00 2001
From: sommerfeld <sommerfeld@sommerfeld.dev>
Date: Thu, 17 Sep 2026 17:31:21 +0100
Subject: Use system coreutils for corporate account lookups

---
 docs/canonical-laptop.md | 6 ++++++
 nix/common.nix           | 1 -
 nix/host.nix             | 2 ++
 nix/vm.nix               | 4 ++--
 4 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/docs/canonical-laptop.md b/docs/canonical-laptop.md
index 9fa62ce..7479b46 100644
--- a/docs/canonical-laptop.md
+++ b/docs/canonical-laptop.md
@@ -143,6 +143,12 @@ a terminal tool; this role does not install the pass Secret Service daemon.
 
 The lists are in `meta/canonical/`. Ghostty's classic confinement is explicit.
 
+The corporate profile uses Ubuntu's coreutils for account lookup through authd.
+It does not install Nix coreutils. If a Nix program cannot resolve your user or
+group, compare it with the corresponding `/usr/bin` command. Do not change the
+account UID or add a duplicate entry to `/etc/passwd`. The test VM uses a local
+account and does not test authd lookups.
+
 Tuicr's Rust crates are fetched from the official static archive server with
 Cargo.lock checksum verification. `just nix-crate-check` tests a fresh download
 without using its cached output. Bootstrap does not need a manual crate prefetch.
diff --git a/nix/common.nix b/nix/common.nix
index 143b161..fb97dfd 100644
--- a/nix/common.nix
+++ b/nix/common.nix
@@ -89,7 +89,6 @@ in
     # Prefer Rust uutils for the unprefixed replacements that pass repo-local
     # usage checks. Keep GNU tar on the system PATH for now; uutils-tar still
     # rejects common GNU tar invocations like `tar -czf`.
-    uutils-coreutils-noprefix
     uutils-diffutils
     uutils-findutils
     uutils-procps
diff --git a/nix/host.nix b/nix/host.nix
index b3d9d60..1ad857b 100644
--- a/nix/host.nix
+++ b/nix/host.nix
@@ -54,6 +54,8 @@ in
   home.sessionVariables.NVIM_TREESITTER_CC = "${pkgs.stdenv.cc}/bin/cc";
 
   home.packages = with pkgs; [
+    uutils-coreutils-noprefix
+
     # ── Thunderbird helpers ───────────────────────────────────────────────────
     external-editor-revived
 
diff --git a/nix/vm.nix b/nix/vm.nix
index 9e6352f..621c73f 100644
--- a/nix/vm.nix
+++ b/nix/vm.nix
@@ -1,4 +1,4 @@
-{ ... }:
+{ pkgs, ... }:
 
 # VM-only Home-Manager package profile.
 {
@@ -11,5 +11,5 @@
     PODMAN_IGNORE_CGROUPSV1_WARNING = "1";
   };
 
-  home.packages = [ ];
+  home.packages = [ pkgs.uutils-coreutils-noprefix ];
 }
-- 
cgit v1.3.1