Deuxfleurs/nixcfg
17
6
Fork 2
Code Issues 8 Pull requests 1 Projects Releases Wiki Activity

Custom ssh config, passwordless sudo

Browse source
This commit is contained in:
Alex 2021-11-16 19:00:15 +01:00
parent 77db1c714c
commit 2fc4b9c0a5
No known key found for this signature in database
GPG key ID: EDABF9711E244EB1
5 changed files with 34 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
configuration.nix
View file

@ -187,9 +187,12 @@ in
];
};
users.extraUsers.root.openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJpaBZdYxHqMxhv2RExAOa7nkKhPBOHupMP3mYaZ73w9 lx@lindy"
];
# Passwordless sudo
security.sudo.wheelNeedsPassword = false;
# users.extraUsers.root.openssh.authorizedKeys.keys = [
# "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJpaBZdYxHqMxhv2RExAOa7nkKhPBOHupMP3mYaZ73w9 lx@lindy"
# ];
# List packages installed in system profile. To search, run:
# $ nix search wget

19
deploy.sh
View file

@ -1,8 +1,19 @@
#!/usr/bin/env bash
for NIXHOST in $(cat inventory); do
cd $(dirname $0)
for NIXHOST in $(ls node); do
NIXHOST=${NIXHOST%.*}
if [ -z "$SSH_USER" ]; then
SSH_DEST=$NIXHOST
else
SSH_DEST=$SSH_USER@$NIXHOST
fi
echo "==== DOING $NIXHOST ===="
cat configuration.nix | ssh root@$NIXHOST tee /etc/nixos/configuration.nix > /dev/null
cat node/$NIXHOST.nix | ssh root@$NIXHOST tee /etc/nixos/node.nix > /dev/null
ssh root@$NIXHOST nixos-rebuild switch
cat configuration.nix | ssh -F ssh_config $SSH_DEST sudo tee /etc/nixos/configuration.nix > /dev/null
cat node/$NIXHOST.nix | ssh -F ssh_config $SSH_DEST sudo tee /etc/nixos/node.nix > /dev/null
ssh -F ssh_config $SSH_DEST sudo nixos-rebuild switch
done

3
inventory
View file

@ -1,3 +0,0 @@
caribou
carcajou
cariacou

10
ssh_config Normal file
View file

@ -0,0 +1,10 @@
UserKnownHostsFile ./ssh_known_hosts
Host caribou
HostName 10.42.0.23
Host carcajou
HostName 10.42.0.22
Host cariacou
HostName 10.42.0.21

3
ssh_known_hosts Normal file
View file

@ -0,0 +1,3 @@
10.42.0.22 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHXyY9yZdq/VYpg3K1plBzFvim41tWlu+Dmov3BNSm39
10.42.0.21 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILYIRbHPU1w1xWRpm2+u3QsXOKfMjv1EXrpYbHT+epds
10.42.0.23 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICNRilSqrgqdZlLdhN2eOY5ZMbzqpeqAdIf6QuChhXU+