system.copySystemConfiguration leaks private information?

NixOS / nixops

NixOps is a tool for deploying to NixOS machines in a network or cloud.

https://nixos.org/nixops

GNU Lesser General Public License v3.0

1.82k stars 363 forks source link

system.copySystemConfiguration leaks private information? #769

Open ts468 opened 6 years ago

ts468 commented 6 years ago

system.copySystemConfiguration uses the configuration.nix of the deploying machine, not of the deployed machine during a nixops deploy operation to a Hetzner machine.

Could someone maybe verify whether there is really an issue?

phryneas commented 6 years ago

Happened to me, too. Any update on this?

aszlig commented 6 years ago

This is really a NixOS issue, see here:

https://github.com/NixOS/nixpkgs/blob/16b3217148b02ad5a2149b500dbfcfa08d7b46d7/nixos/modules/system/activation/top-level.nix#L257-L262