| 17 Mar 2025 |
 @elvishjerricco:matrix.org | that's.... odd | 17:58:49 |
 antifuchs | I think on the first one, I misread that ethernet card renaming thing as another | 18:02:48 |
| antifuchs | * I think on the first one, I misread that ethernet card renaming thing as another: now that networking is straightened out, I have managed to get the ssh server to start and unlock zfs through there | 18:03:15 |
| antifuchs | but yeah, those repeating password prompts are really really annoying | 18:03:27 |
| antifuchs | it would even print "Login failed" while I was typing | 18:03:42 |
| @elvishjerricco:matrix.org | .... what? | 18:06:13 |
| @elvishjerricco:matrix.org | login failed? | 18:06:16 |
| @elvishjerricco:matrix.org | that's not a thing that happens in stage 1 | 18:06:32 |
| antifuchs | sorry, I'm being unclear. this is the emergency mode password prompt. Initially, that works alright: a critical unit fails, it prompts for root password, I enter it. Then I tried starting that unit again and it entered emergency mode again, this time prompting over and over | 18:09:39 |
| antifuchs | could this be a Restart="on-failure"; type thing? huh | 18:10:17 |
| @elvishjerricco:matrix.org | antifuchs: I'm still not quite following. What unit is failing? | 18:26:39 |
| antifuchs | that was my initrd ssh server, due to that network misconfiguration on my part. The ssh server has Restart="on-failure", which is what I suspect causes the password prompt to also restart | 18:27:59 |
| antifuchs | (restart without a rate limit, critically) | 18:28:40 |
| @elvishjerricco:matrix.org | That doesn't sound like what ought to be happening, huh | 18:28:40 |
| antifuchs | yea, it's not amazing ((: | 18:29:10 |
| @elvishjerricco:matrix.org | well I mean I'm trying to figure out why that would be what's happening | 18:30:51 |
| antifuchs | I think I still have the broken initrd on my boot menu, let me take a screenshot rq | 18:34:31 |
| @elvishjerricco:matrix.org | like sshd failing again shouldn't cause emergency mode to restart | 18:34:41 |
| antifuchs | sorry, "ssh server" is a shorthand for https://github.com/boinkor-net/hoopsnake; it's me on my very own bullshit. service config is this: https://github.com/boinkor-net/hoopsnake/blob/main/nixos/module.nix#L191 | 18:35:56 |
| antifuchs | * sorry, "ssh server" is shorthand for https://github.com/boinkor-net/hoopsnake; it's me on my very own bullshit. service config is this: https://github.com/boinkor-net/hoopsnake/blob/main/nixos/module.nix#L191 | 18:36:50 |
| antifuchs | rebooting now to capture that behavior | 18:39:01 |
 emily | how do you get your tailscale keys in initrd btw? | 18:42:20 |
| antifuchs | using tpm-encrypted systemd credentials (: | 18:43:16 |
| antifuchs | LoadCredential is really pretty sweet | 18:43:25 |
| antifuchs | got a screen recording that hopefully doesn't have passwords in it. just need to upload it somewhere | 18:43:51 |
| antifuchs | https://vimeo.com/1066686462?share=copy#t=0 is the screencap | 18:45:51 |
| antifuchs | at minute 1:00 or so you can see it popping up the emergency password prompt after I started the unit | 18:46:43 |
| antifuchs | then I entered the first 10c of the password and didn't press enter, but it popped up another prompt | 18:47:02 |
| antifuchs | (you can also see some multiple zfs password prompts that might stem from the same issue tbh) | 18:49:53 |
 gdamjan | why not use TPM credentials for the ZFS pool too? | 19:58:35 |
