wurzel/fruitbasket
9
1
Fork 0
Code Issues 5 Pull requests Packages Projects Releases Wiki Activity

quitte: enable ssh in initrd

Browse source
This commit is contained in:
Lyn Fugmann 2024-01-25 19:40:22 +01:00
parent 4d0edc7280
commit 316ffbb9e0
Signed by: fugi
GPG key ID: 4472A20091BFA792
2 changed files with 20 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
flake.nix
View file

@ -69,6 +69,7 @@
./modules/manual.nix ./modules/manual.nix
./modules/sharepic.nix ./modules/sharepic.nix
./modules/zammad.nix ./modules/zammad.nix
./modules/initrd-ssh.nix
{ {
nixpkgs.overlays = [ self.overlays.default ]; nixpkgs.overlays = [ self.overlays.default ];
sops.defaultSopsFile = ./secrets/quitte.yaml; sops.defaultSopsFile = ./secrets/quitte.yaml;

19
modules/initrd-ssh.nix Normal file
View file

@ -0,0 +1,19 @@
# Find the required kernel module for the network adapter using `lspci -v` and add it to `boot.initrd.availableKernelModules`.
# Enable `networking.useDHCP` or set a static ip using the `ip=` kernel parameter.
# Generate another SSH host key for the machine:
# $ ssh-keygen -t ed25519 -N "" -f /etc/ssh/ssh_host_ed25519_key_initrd -C HOSTNAME-initrd
# Add the public key to your known_hosts and create an ssh config entry.
{ ... }:
{
boot.initrd.network = {
enable = true;
ssh = {
enable = true;
port = 222;
shell = "/bin/cryptsetup-askpass";
hostKeys = [ "/etc/ssh/ssh_host_ed25519_key_initrd" ];
# authorizedKeys option inherits root's authorizedKeys.keys, but not keyFiles
};
};
}