colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #197382 from phaer/patch-4

Browse Source 
initrd-ssh: allow empty hostKeys
This commit is contained in:
Ryan Lahfa 2022-12-04 15:34:43 +01:00 committed by GitHub
commit e1185ea096
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
nixos/modules/system/boot/initrd-ssh.nix
View File

@ -73,6 +73,15 @@ in
'';
};
ignoreEmptyHostKeys = mkOption {
type = types.bool;
default = false;
description = lib.mdDoc ''
Allow leaving {option}`config.boot.initrd.network.ssh` empty,
to deploy ssh host keys out of band.
'';
};
authorizedKeys = mkOption {
type = types.listOf types.str;
default = config.users.users.root.openssh.authorizedKeys.keys;
@ -141,7 +150,7 @@ in
}
{
assertion = cfg.hostKeys != [];
assertion = (cfg.hostKeys != []) || cfg.ignoreEmptyHostKeys;
message = ''
You must now pre-generate the host keys for initrd SSH.
See the boot.initrd.network.ssh.hostKeys documentation