scale-network
scale-network copied to clipboard
nix configuration should consume ssh key facts
Description
We currently are defining the ssh key and user configuration in nixos without consuming facts/keys
. It would be better to consume them from facts so that they are all defined and updated in one place.
Acceptance Criteria
-
facts/keys
is utilized to define user ssh keys
What you thinking on this, a script that converts facts/keys to ssh.nix or something?
I maybe able to get the builds to fetch directly from github if need, and fall back to a local copy if the github 'is not available'.
all the details are here.
here are some idea's to lick this problem.
https://discourse.nixos.org/t/fetching-ssh-public-keys/12076/7
Since it should be updating not only the authorized keys files, but also creating user accounts and updating sudoers, I suspect ssh.nix might not be the right solution. OwenOn Feb 1, 2024, at 07:36, Lee Hughes @.***> wrote: What you thinking on this, a script that converts facts/keys to ssh.nix or something? I maybe able to get the builds to fetch directly from github if need, and fall back to a local copy if the github 'is not available'. all the details are here. https://discourse.nixos.org/t/fetching-ssh-public-keys/12076/7
—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you are subscribed to this thread.Message ID: @.***>
@kylerisse has already done some work previously on this. Im going to assign the issue to him and have him put in a PR accordingly. Its not anything terribly difficult since we already have the keys in facts/keys
.