summary refs log blame commit diff stats
path: root/system/impermanence/mods/openssh.nix
blob: 0373a8328300162e304e5f492d2092b5cb139d8f (plain) (tree)
1
2
3
4
5
6
7
8
9
10
11
        








                                                                                                                                                                






                                                
    
 
{...}: {
  /*
   FIXME:
    This results in a boot error, as the `/var/lib/sshd` directory is only mounted _after_ the stage 2 init and with it the system activation.
    Agenix needs the sshd hostkey however to decrypt the secrets and such we have to ensure that this directory is mounted _before_ the system activation.
    Alas the only way I see to achieve that is to store the ssh hostkey directly on /srv, which is mounted before (it's marked as 'neededForBoot' after all).

    It should be possible to achieve this with impermanence however, as `/var/log` is mounted in the stage 1 init; The problem is that I have no idea _why_ only
    this is mounted and nothing else.


  environment.persistence."/srv".directories = [
    {
      directory = "/var/lib/sshd";
      user = "root";
      group = "root";
      mode = "0755";
    }
  ];
  */
}