1 files changed, 11 insertions, 0 deletions
diff --git a/system/impermanence/mods/openssh.nix b/system/impermanence/mods/openssh.nix
index 656f96e..0373a83 100644
--- a/system/impermanence/mods/openssh.nix
+++ b/system/impermanence/mods/openssh.nix
@@ -1,4 +1,14 @@
 {...}: {
+  /*
+   FIXME:
+    This results in a boot error, as the `/var/lib/sshd` directory is only mounted _after_ the stage 2 init and with it the system activation.
+    Agenix needs the sshd hostkey however to decrypt the secrets and such we have to ensure that this directory is mounted _before_ the system activation.
+    Alas the only way I see to achieve that is to store the ssh hostkey directly on /srv, which is mounted before (it's marked as 'neededForBoot' after all).
+
+    It should be possible to achieve this with impermanence however, as `/var/log` is mounted in the stage 1 init; The problem is that I have no idea _why_ only
+    this is mounted and nothing else.
+
+
   environment.persistence."/srv".directories = [
     {
       directory = "/var/lib/sshd";
@@ -7,4 +17,5 @@
       mode = "0755";
     }
   ];
+  */
 }