emily/nixos-images
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

also copy key from sudo user to new image

Browse source
This commit is contained in:
Jörg Thalheim 2023-01-24 14:33:09 +01:00
parent 777c1423b1
commit 29f72fead3
1 changed files with 18 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
nix/kexec-installer/module.nix
View file

@ -26,16 +26,28 @@ in {
pwd
mkdir -p initrd/ssh
pushd initrd
for key in /root/.ssh/authorized_keys /root/.ssh/authorized_keys2; do
if [ -e "$key" ]; then
# workaround for debian shenanigans
grep -o '\(ssh-[^ ]* .*\)' "$key" >> ssh/authorized_keys
fi
homes=(/root)
if [[ -n "''${SUDO_USER-}" ]]; then
sudo_home=$(bash -c "cd ~$(printf %q "$SUDO_USER") && pwd")
homes+=("$sudo_home")
fi
for home in "''${homes[@]}"; do
for file in .ssh/authorized_keys .ssh/authorized_keys2; do
key="$home/$file"
if [[ -e "$key" ]]; then
# workaround for debian shenanigans
grep -o '\(ssh-[^ ]* .*\)' "$key" >> ssh/authorized_keys
fi
done
done
# Typically for NixOS
if [ -e /etc/ssh/authorized_keys.d/root ]; then
if [[ -e /etc/ssh/authorized_keys.d/root ]]; then
cat /etc/ssh/authorized_keys.d/root >> ssh/authorized_keys
fi
if [[ -n "''${SUDO_USER-}" ]] && [[ -e "/etc/ssh/authorized_keys.d/$SUDO_USER" ]]; then
cat "/etc/ssh/authorized_keys.d/$SUDO_USER" >> ssh/authorized_keys
fi
for p in /etc/ssh/ssh_host_*; do
cp -a "$p" ssh
done