scale-network icon indicating copy to clipboard operation
scale-network copied to clipboard

nix configuration should consume ssh key facts

Open sarcasticadmin opened this issue 1 year ago • 3 comments

Description

We currently are defining the ssh key and user configuration in nixos without consuming facts/keys. It would be better to consume them from facts so that they are all defined and updated in one place.

Acceptance Criteria

  • facts/keys is utilized to define user ssh keys

sarcasticadmin avatar Jan 25 '24 20:01 sarcasticadmin

What you thinking on this, a script that converts facts/keys to ssh.nix or something?

I maybe able to get the builds to fetch directly from github if need, and fall back to a local copy if the github 'is not available'.

all the details are here.

here are some idea's to lick this problem.

https://discourse.nixos.org/t/fetching-ssh-public-keys/12076/7

nixinator avatar Feb 01 '24 15:02 nixinator

Since it should be updating not only the authorized keys files, but also creating user accounts and updating sudoers, I suspect ssh.nix might not be the right solution. OwenOn Feb 1, 2024, at 07:36, Lee Hughes @.***> wrote: What you thinking on this, a script that converts facts/keys to ssh.nix or something? I maybe able to get the builds to fetch directly from github if need, and fall back to a local copy if the github 'is not available'. all the details are here. https://discourse.nixos.org/t/fetching-ssh-public-keys/12076/7

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you are subscribed to this thread.Message ID: @.***>

owendelong avatar Feb 01 '24 16:02 owendelong

@kylerisse has already done some work previously on this. Im going to assign the issue to him and have him put in a PR accordingly. Its not anything terribly difficult since we already have the keys in facts/keys.

sarcasticadmin avatar Feb 01 '24 17:02 sarcasticadmin