Andy Wingo skribis: > - (shell #~(string-append #$shadow "/sbin/nologin")))) > + (shell "/run/current-system/profile/sbin/nologin"))) [...] > - (shell #~(string-append #$shadow > - "/sbin/nologin"))))))))) > + (shell "/run/current-system/profile/sbin/nologin")))))))) [...] > + (shell user-account-shell ; string > + (default "/run/current-system/profile/bin/bash")) The problem I see with this approach is that it will only work if the shell is actually install in the global profile, and it’s really a workaround: users could still use a gexp as for the ‘shell’ field. I think we should instead generate /etc/shells based on the ‘shell’ field of each user account, so that it matches exactly what’s being used: