maralorn/nixos-config
1
0
Fork 0
Code Wiki Activity

Fix boot key setup

Browse source
This commit is contained in:
Malte Brandy 2019-02-10 01:53:24 +01:00
parent da6c027c3e
commit 9adffbe351
2 changed files with 10 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
hosts/hera/boot.nix
View file

@ -1,6 +1,8 @@
{ ... }:
{
m-0.server.initSSHKey = ./secret/boot_rsa;
# Use the systemd-boot EFI boot loader.
boot = {
loader = {

11
system/modules/server/init_ssh.nix
View file

@ -1,6 +1,11 @@
{ config, pkgs, lib, ... }:
with lib;
{
options = {
m-0.server.initSSHKey = mkOption {
type = types.path;
};
};
config = mkIf config.m-0.server.enable {
boot.initrd = {
@ -11,9 +16,9 @@ config = mkIf config.m-0.server.enable {
authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys;
# generate file with
# dropbearkey -t rsa -f /etc/nixos/boot_rsa
# nix-env -iA nixos.dropbear
hostRSAKey = builtins.toPath "/etc/nixos/hosts/${config.networking.hostName}/secret/boot_rsa";
# nix-shell -p dropbear
# dropbearkey -t rsa -f boot_rsa
hostRSAKey = config.m-0.server.initSSHKey;
};
};
postMountCommands = "ip link set eth0 down";