From b5fc07416652a445f15946ce7e5fc48766cf6722 Mon Sep 17 00:00:00 2001 From: Benedikt Peetz Date: Tue, 24 Dec 2024 16:09:20 +0100 Subject: refactor(modules/impermanence): Migrate to by-name while distributing mods --- system/impermanence/mods/openssh.nix | 21 --------------------- 1 file changed, 21 deletions(-) delete mode 100644 system/impermanence/mods/openssh.nix (limited to 'system/impermanence/mods/openssh.nix') diff --git a/system/impermanence/mods/openssh.nix b/system/impermanence/mods/openssh.nix deleted file mode 100644 index 0373a83..0000000 --- a/system/impermanence/mods/openssh.nix +++ /dev/null @@ -1,21 +0,0 @@ -{...}: { - /* - FIXME: - This results in a boot error, as the `/var/lib/sshd` directory is only mounted _after_ the stage 2 init and with it the system activation. - Agenix needs the sshd hostkey however to decrypt the secrets and such we have to ensure that this directory is mounted _before_ the system activation. - Alas the only way I see to achieve that is to store the ssh hostkey directly on /srv, which is mounted before (it's marked as 'neededForBoot' after all). - - It should be possible to achieve this with impermanence however, as `/var/log` is mounted in the stage 1 init; The problem is that I have no idea _why_ only - this is mounted and nothing else. - - - environment.persistence."/srv".directories = [ - { - directory = "/var/lib/sshd"; - user = "root"; - group = "root"; - mode = "0755"; - } - ]; - */ -} -- cgit 1.4.1