Sender | Message | Time |
---|---|---|
5 Jan 2022 | ||
Ok, what about the part where home-manager is referenced? | 21:45:58 | |
Yeah we're getting there | 21:46:17 | |
So that's the node.nix file | 21:46:28 | |
And then we've got the
| 21:47:11 | |
And it just works | 21:47:16 | |
*
So that's the node.nix file | 21:49:56 | |
*
So that's the node.nix file | 21:50:24 | |
And from
| 21:51:31 | |
But hey, if it worked back then accidentally and doesn't now because I wasn't doing this correctly, that is 100% on me and I can at least do things right now :D | 21:52:10 | |
So thank you! | 21:52:15 | |
So I'm curious. In my setup my servers all exist inside of my flake outputs.nixosConfigurations, and my outputs.colmena is just a stub that consumes nixosConfigurations and emits a colmena configuration. Is anyone else doing it this way, or just me? I really like the portability of keeping my hosts in nixosConfigurations | 23:27:16 | |
the stub:
| 23:29:18 | |
6 Jan 2022 | ||
05:29:17 | ||
In reply to @buckley310:matrix.orgOh this is exactly what I was just looking for today actually! | 12:55:04 | |
In reply to @buckley310:matrix.orgHmm, I tried implementing this, but I'm not sure where you're getting config.sconfig from? I don't see an sconfig attribute to be fetched from there? | 13:14:17 | |
In reply to @necrophcodr:matrix.orghttps://github.com/buckley310/nixos-config/blob/master/modules/deploy.nix it’s my own module that just adds the deployment settings there. | 15:04:14 | |
Ah okay that makes sense | 15:27:20 | |
So, what would people think about a PR that adds a deployment.targetSshPubKey setting, which when set, would change SSH's "StrictHostKeyChecking" to "yes"? 🤔 also thoughts on the option name? | 22:15:21 | |
i have been deploying stuff with a config file that sets StrictHostKeyChecking=yes , until just now where I realized colmena was overriding my settting with accept-new 😅 https://github.com/zhaofengli/colmena/blob/6401ce4c3c6300b7e2eec059aacd9a1059f28fa5/src/nix/host/ssh.rs#L209 | 22:17:04 | |
or perhaps deployment.targetPublicKeys = [ "ssh-ed25519 AAAAC.....GwLfx" ]; | 22:23:21 | |
Yeah, we should probably have an option like that, or have an option to configure a set of "freeform" SSH configs. | 23:48:53 | |
7 Jan 2022 | ||
Yeah, I’ve basically got a flake devshell that sets up a handful of options including known hosts using $SSH_CONFIG_FILE | 00:02:30 | |
Maybe I can freshen up my rust skills and give it some time | 00:02:53 | |
In reply to @zhaofeng:zhaofeng.liThat would be pretty cool indeed | 21:16:20 | |
8 Jan 2022 | ||
one possible way to pull off custom SSH options is for eval.nix to basically ocmpile an SSH config file, and pass it up to colmena. one side benefit to this would be that the username and port configurations wouldn't even need to touch the rust code at that point, they could just be yet more options in the config file. one downside of that solution though is that, as far as i know, SSH can only handle one config file, so that would kill the usefullness of $SSH_CONFIG_FILE . although there's an argument to be made at that point whether that variable is needed, if the builtin ssh config stuff is complete enough | 02:28:01 | |
* one possible way to pull off custom SSH options is for eval.nix to basically compile an SSH config file, and pass it up to colmena. one side benefit to this would be that the username and port configurations wouldn't even need to touch the rust code at that point, they could just be yet more options in the config file. one downside of that solution though is that, as far as i know, SSH can only handle one config file, so that would kill the usefullness of $SSH_CONFIG_FILE . although there's an argument to be made at that point whether that variable is needed, if the builtin ssh config stuff is complete enough | 02:28:17 | |
* one possible way to pull off custom SSH options is for eval.nix to basically compile an SSH config file, and pass it up to colmena. one side benefit to this would be that the username and port configurations wouldn't even need to touch the rust code at that point, they could just be yet more options in the config file. one downside of that solution though is that, as far as i know, SSH can only handle one config file, so that would kill $SSH_CONFIG_FILE . although there's an argument to be made at that point whether that variable is needed, if the builtin ssh config stuff is complete enough | 02:28:46 | |
* one possible way to pull off custom SSH options is for eval.nix to basically compile an SSH config file, and pass it up to colmena. one side benefit to this would be that the username and port configurations wouldn't even need to touch the rust code at that point, they could just be yet more options in the config file. one downside of that solution though is that, as far as i know, SSH can only handle one config file, so that would kill $SSH_CONFIG_FILE . although there's an argument to be made whether that variable is needed anymore, if the builtin ssh config stuff is complete enough | 02:29:06 | |
thought experiment, what if basically all of the connection settings got merged into SSH options. get rid of
which would then compile this following ssh config file for colmena to just blindly pass to
| 02:37:43 | |
the old settings could link to the new settings with like aliases or something, and then presto, it simplifies the code, and unlocks every setting available in SSH 🤔 | 02:38:52 |