socallinuxexpo / scale-network

SCaLE's on-site expo network configurations, wifi, tooling, and scripts
https://www.socallinuxexpo.org/
BSD 3-Clause "New" or "Revised" License
40 stars 16 forks source link

nix configuration should consume ssh key facts #659

Open sarcasticadmin opened 5 months ago

sarcasticadmin commented 5 months ago

Description

We currently are defining the ssh key and user configuration in nixos without consuming facts/keys. It would be better to consume them from facts so that they are all defined and updated in one place.

Acceptance Criteria

nixinator commented 5 months ago

What you thinking on this, a script that converts facts/keys to ssh.nix or something?

I maybe able to get the builds to fetch directly from github if need, and fall back to a local copy if the github 'is not available'.

all the details are here.

here are some idea's to lick this problem.

https://discourse.nixos.org/t/fetching-ssh-public-keys/12076/7

owendelong commented 5 months ago

Since it should be updating not only the authorized keys files, but also creating user accounts and updating sudoers, I suspect ssh.nix might not be the right solution. OwenOn Feb 1, 2024, at 07:36, Lee Hughes @.***> wrote: What you thinking on this, a script that converts facts/keys to ssh.nix or something? I maybe able to get the builds to fetch directly from github if need, and fall back to a local copy if the github 'is not available'. all the details are here. https://discourse.nixos.org/t/fetching-ssh-public-keys/12076/7

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you are subscribed to this thread.Message ID: @.***>

sarcasticadmin commented 5 months ago

@kylerisse has already done some work previously on this. Im going to assign the issue to him and have him put in a PR accordingly. Its not anything terribly difficult since we already have the keys in facts/keys.