diff --git a/config/profiles/builder.nix b/config/profiles/builder.nix index b4da590..4f6e989 100644 --- a/config/profiles/builder.nix +++ b/config/profiles/builder.nix @@ -2,7 +2,7 @@ kyouma.deployment.auto-upgrade.cache = "daemon"; nix.gc.options = lib.mkForce "--delete-older-than 60d"; nix.settings = { - trusted-users = [ "build" ]; + trusted-users = [ "nix-ssh" ]; #system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ] ++ lib.optionals pkgs.hostPlatform.isx86_64 [ "gccarch-x86-64-v3" ]; }; nix.extraOptions = '' @@ -11,11 +11,10 @@ max-substitution-jobs = 20 max-silent-time = 14400 ''; - users.users.build = { - isNormalUser = true; - shell = pkgs.bash; - ignoreShellProgramCheck = true; - openssh.authorizedKeys.keys = [ + nix.sshServe = { + enable = true; + write = true; + keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA/+iN407+HsfHbbC3tfdA8Yf4TZ08qXQMb4tb/SDAs+ emily@card" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE/vCXM3IaxJP9v2Y+xcQrQD2IcffgdzqtWhpMjj9Xl5 hydra@seras" "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICT0dGyLUjxFnvqUmex+5xUGQ7D4yGHKo267JgApcq0k root@ryuuko" diff --git a/config/services/hydra/nix-config.nix b/config/services/hydra/nix-config.nix index 32a8333..73e47de 100644 --- a/config/services/hydra/nix-config.nix +++ b/config/services/hydra/nix-config.nix @@ -10,7 +10,7 @@ } { hostName = "integra.kyouma.net"; - sshUser = "build"; + sshUser = "nix-ssh"; maxJobs = 2; speedFactor = 4; systems = [ "aarch64-linux" ]; @@ -43,9 +43,6 @@ "https://" ]; }; - users.users.hydra-queue-runner.openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE/vCXM3IaxJP9v2Y+xcQrQD2IcffgdzqtWhpMjj9Xl5 hydra@seras" - ]; programs.ssh = { knownHosts = { "build-worker-03.nyantec.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEGqTY74c5g15DSNPNM2Wdr5jAwS7BFgX1XRnhtGOnJc"; diff --git a/flake.lock b/flake.lock index ea8981e..2692e35 100644 --- a/flake.lock +++ b/flake.lock @@ -925,11 +925,11 @@ }, "nixpkgs_4": { "locked": { - "lastModified": 1725103162, - "narHash": "sha256-Ym04C5+qovuQDYL/rKWSR+WESseQBbNAe5DsXNx5trY=", + "lastModified": 1725432240, + "narHash": "sha256-+yj+xgsfZaErbfYM3T+QvEE2hU7UuE+Jf0fJCJ8uPS0=", "owner": "nixos", "repo": "nixpkgs", - "rev": "12228ff1752d7b7624a54e9c1af4b222b3c1073b", + "rev": "ad416d066ca1222956472ab7d0555a6946746a80", "type": "github" }, "original": { @@ -956,11 +956,11 @@ "treefmt-nix": "treefmt-nix_2" }, "locked": { - "lastModified": 1725499492, - "narHash": "sha256-IjpbYl4ljZ6gffzfH/n2qYbtu7PZ1KM2LW+cVL6w1bk=", + "lastModified": 1725563454, + "narHash": "sha256-RQ9aKwXmqNHMBFOlHEUVrAFo7YHJSVn4nBgi2rcaCY4=", "owner": "nix-community", "repo": "nixvim", - "rev": "e48da949cf41597d43f8e3880fc1389129ad7427", + "rev": "84249a9dabdf930d968d248024c4d6240ee14548", "type": "github" }, "original": { @@ -1036,11 +1036,11 @@ "nixpkgs-stable": "nixpkgs-stable_2" }, "locked": { - "lastModified": 1725201042, - "narHash": "sha256-lj5pxOwidP0W//E7IvyhbhXrnEUW99I07+QpERnzTS4=", + "lastModified": 1725540166, + "narHash": "sha256-htc9rsTMSAY5ek+DB3tpntdD/es0eam2hJgO92bWSys=", "owner": "Mic92", "repo": "sops-nix", - "rev": "5db5921e40ae382d6716dce591ea23b0a39d96f7", + "rev": "d9d781523a1463965cd1e1333a306e70d9feff07", "type": "github" }, "original": {