strace sudo nixos-rebuild switch
execve("/run/wrappers/bin/sudo", ["sudo", "nixos-rebuild", "switch"], 0x7fffb1bb14a0 /* 159 vars */) = 0
access(0x7f487fbda105, F_OK)            = -1 ENOENT (No such file or directory)
brk(NULL)                               = 0x55ded7873000
arch_prctl(0x3001 /* ARCH_??? */, 0x7ffcac4e6d10) = -1 EINVAL (Invalid argument)
fcntl(0, F_GETFD)                       = 0
fcntl(1, F_GETFD)                       = 0
fcntl(2, F_GETFD)                       = 0
access(0x7f487fbda105, F_OK)            = -1 ENOENT (No such file or directory)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f487fbaf000
access(0x7f487fbdb230, R_OK)            = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, 0x7ffcac4e5e60, O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, 0x7ffcac4e5e60, 0x7ffcac4e5f40, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, 0x7ffcac4e5e60, O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, 0x7ffcac4e5e60, 0x7ffcac4e5f40, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, 0x7ffcac4e5e60, O_RDONLY|O_CLOEXEC) = 3
read(3, 0x7ffcac4e60a8, 832)            = 832
pread64(3, 0x7ffcac4e5af0, 784, 64)     = 784
newfstatat(3, 0x7f487fbdac51, 0x7ffcac4e5f40, AT_EMPTY_PATH) = 0
pread64(3, 0x7ffcac4e5b90, 784, 64)     = 784
mmap(NULL, 1990000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f487f9c9000
mmap(0x7f487f9eb000, 1413120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f487f9eb000
mmap(0x7f487fb44000, 360448, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17b000) = 0x7f487fb44000
mmap(0x7f487fb9c000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1d3000) = 0x7f487fb9c000
mmap(0x7f487fba2000, 52592, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f487fba2000
close(3)                                = 0
mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f487f9c6000
arch_prctl(ARCH_SET_FS, 0x7f487f9c6740) = 0
set_tid_address(0x7f487f9c6a10)         = 5069
set_robust_list(0x7f487f9c6a20, 24)     = 0
rseq(0x7f487f9c7060, 0x20, 0, 0x53053053) = 0
mprotect(0x7f487fb9c000, 16384, PROT_READ) = 0
mprotect(0x55ded59bc000, 4096, PROT_READ) = 0
mprotect(0x7f487fbe2000, 8192, PROT_READ) = 0
prlimit64(0, RLIMIT_STACK, NULL, 0x7ffcac4e6a80) = 0
getrandom(0x7f487fba72b8, 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55ded7873000
brk(0x55ded7894000)                     = 0x55ded7894000
readlink(0x55ded59bb318, 0x55ded78732a0, 4096) = 38
newfstatat(AT_FDCWD, 0x55ded78732a0, 0x7ffcac4e4c70, AT_SYMLINK_NOFOLLOW) = 0
geteuid()                               = 1000
write(2, 0x7ffcac4e4a50, 93Assertion `!(st.st_mode & S_ISUID) || (st.st_uid == geteuid())` in NixOS's wrapper.c failed.
)            = 93
rt_sigprocmask(SIG_UNBLOCK, 0x7ffcac4e4b40, NULL, 8) = 0
gettid()                                = 5069
getpid()                                = 5069
tgkill(5069, 5069, SIGABRT)             = 0
--- SIGABRT {si_signo=SIGABRT, si_code=SI_TKILL, si_pid=5069, si_uid=1000} ---
+++ killed by SIGABRT (core dumped) +++
Aborted (core dumped)