deployment.keys = {
  mscbot_password = {
    keyCommand = [ <something> ];
    user = "msclinkbot";
    group = "msclinkbot";
  };

My config is:

   systemd.services.msclinkbot = {
      description = "MSC Link Bot";
      after = [
        "matrix-synapse.target"
        "mscbot_password-key.service"
      ];
      wantedBy = [ "multi-user.target" ];
      serviceConfig = {
        ExecStart = ''
          ${pkgs.coreutils}/bin/cat /run/keys/mscbot_password
        '';
        Restart = "on-failure";
        User = "msclinkbot";
        Group = "msclinkbot";
      };
    };

    users = {
      users.msclinkbot = {
        group = "msclinkbot";
        isSystemUser = true;
        home = cfg.dataDir;
        createHome = true;
      };
      groups.msclinkbot = { };
    };

I can't get into the msclinkbot user because it says that it's currently unavailable

Oh, I was trying to use su to shell in.

root@matrix:~/ > sudo -u msclinkbot cat /var/lib/msclinkbot
cat: /var/lib/msclinkbot: Is a directory

Oh, I was trying to use su to shell in.

root@matrix:~/ > sudo -u msclinkbot cat /run/keys/mscbot_password
cat: /run/keys/mscbot_password: Permission denied

In reply to @sumner:nevarro.space
running the same command as root works just fine

In reply to @hexa:lossy.network
the unit likely needs SupplementaryGroups = [ "keys" ];

hello, i'm trying to deploy a system on a hetzner ARM vps. it worked well so far, until I tried to use arion for a docker compose app.

these are the resulting logs: https://s10e.de/p/bkjN5a

In reply to @obsidianical:matrix.org

hello, i'm trying to deploy a system on a hetzner ARM vps. it worked well so far, until I tried to use arion for a docker compose app.

these are the resulting logs: https://s10e.de/p/bkjN5a

I highly recommend setting boot.binfmt.emulatedSystems = [ "aarch64-linux" ]; in your desktop's configuration.nix if you do aarch64 stuff.

This will enable cross compilation, meaning you will be able to eval and build your ARM VPS on x86_64 :)

In reply to @shyim:matrix.org
or add your machine as remote builder to your local nix :D