!XLCFfvFhUkYwOMLbVx:nixos.org

agenix

255 Members
age-encrypted secrets for NixOS https://github.com/ryantm/agenix/81 Servers

Load older messages


SenderMessageTime
21 Jul 2024
@arbel:matrix.spacetime.technologyarbel i didn't use it yet because i couldn't get it to decrypt. it needs to be symlinked to the keepassxc config folder. 16:24:27
@arbel:matrix.spacetime.technologyarbel is that an issue? 16:24:42
@arbel:matrix.spacetime.technologyarbel
In reply to @tim92:matrix.org
But how do you reference the file in your nix config? You only show the agenix configuration and secret file setup and not how you use it
AHHHHHH i found the issue.
the secret needs to have the `.file` or it wont work... obviously...
somehow i totally missed that and the error made it seem like the file was getting loaded
16:46:03
@arbel:matrix.spacetime.technologyarbelimage.png
Download image.png
18:24:45
@arbel:matrix.spacetime.technologyarbel it works for the nixOS configuration now including my hardware keys, but home-manager doesn't like them.
it just doesn't do anything. i will do some more testing tomorrow.
20:29:03
22 Jul 2024
@tim92:matrix.orgtimI would need more information to help you here..07:36:20
@arbel:matrix.spacetime.technologyarbeli found at least a part of the issue. the systemd service agenix installs (for the user) never runs itself. after adding a start command to home.activation it works, except for decryption on login but i can script that too07:41:28
23 Jul 2024
@ezzobirbezziou:matrix.orgEzzobir Bezziou joined the room.08:20:15
@sec:nyaw.xyzSecirian changed their profile picture.11:47:00
@sec:nyaw.xyzSecirian changed their profile picture.11:50:29
24 Jul 2024
@redstone-menace:matrix.orgRedstone changed their display name from redstone-menace to Redstone.10:17:11
25 Jul 2024
@fadenb:utzutzutz.net@fadenb:utzutzutz.net left the room.07:56:04
28 Jul 2024
@different-name:matrix.orgDifferent joined the room.23:50:14
@different-name:matrix.orgDifferent

Hi! I'm trying to use the following:

passwordFile = config.age.secrets.user-password.path;

But I can't login with my password

23:52:33
@different-name:matrix.orgDifferentI don't get any errors when rebuilding23:53:01
@different-name:matrix.orgDifferent

I didn't see any in the boot log:

Jul 29 09:41:38 localhost systemd[1]: Starting NixOS Activation...
Jul 29 09:41:39 localhost initrd-nixos-activation-start[695]: booting system configuration /nix/store/rj97h5dxl0jjwvd3scrv8xxjfydprg3y-nixos-sy>
Jul 29 09:41:39 localhost initrd-nixos-activation-start[695]: running activation script...
Jul 29 09:41:39 localhost initrd-nixos-activation-start[722]: [agenix] creating new generation in /run/agenix.d/1
Jul 29 09:41:39 localhost initrd-nixos-activation-start[722]: [agenix] decrypting secrets...
Jul 29 09:41:39 localhost initrd-nixos-activation-start[722]: decrypting '/nix/store/djdcr224dm9dikhsd0kg3mflnzfkkm5b-password.age' to '/run/ag>
Jul 29 09:41:39 localhost initrd-nixos-activation-start[722]: decrypting '/nix/store/43kvbaidx2h9xvg7a21vbw3pni07l2dq-rclone.conf.age' to '/run>
Jul 29 09:41:39 localhost initrd-nixos-activation-start[722]: decrypting '/nix/store/awgdp7a0g6n5s78lz961p9jj7inxbvhc-password.age' to '/run/ag>
Jul 29 09:41:39 localhost initrd-nixos-activation-start[722]: [agenix] symlinking new secrets to /run/agenix (generation 1)...
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving group 'fwupd-refresh' with GID 999
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving group 'nscd' with GID 997
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving group 'polkituser' with GID 996
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving group 'rtkit' with GID 995
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving group 'sshd' with GID 994
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving group 'systemd-coredump' with GID 993
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving group 'systemd-oom' with GID 992
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving group 'uinput' with GID 990
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving user 'different' with UID 1000
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving user 'fwupd-refresh' with UID 999
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving user 'nm-iodine' with UID 998
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving user 'nscd' with UID 997
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving user 'rtkit' with UID 996
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving user 'sshd' with UID 995
Jul 29 09:41:39 localhost initrd-nixos-activation-start[785]: reviving user 'systemd-oom' with UID 994
Jul 29 09:41:39 localhost initrd-nixos-activation-start[722]: [agenix] chowning...
Jul 29 09:41:39 localhost initrd-nixos-activation-start[722]: setting up /etc...
Jul 29 09:41:39 localhost systemd[1]: initrd-nixos-activation.service: Deactivated successfully.
23:54:51
@different-name:matrix.orgDifferentI tried copy pasting the password from the decrypted age file just in case i was typing it wrong23:55:29
@different-name:matrix.orgDifferentWith no errors, i'm not sure where to go23:57:20
29 Jul 2024
@hexa:lossy.networkhexahm, best to check the activation script00:15:52
@hexa:lossy.networkhexanot sure when exactly /etc/shadow gets rendered00:16:03
@hexa:lossy.networkhexayou could try using hashedPassword instead 🤔00:16:59
@different-name:matrix.orgDifferentI'd rather use agenix10:37:49
@different-name:matrix.orgDifferentHow might I check the activation script?10:38:16
@ghadfg:matrix.orgポポロ joined the room.21:21:51
@ghadfg:matrix.orgポポロ屏幕截图_20240730_004402.png
Download 屏幕截图_20240730_004402.png
22:44:21
@ghadfg:matrix.orgポポロwhy is faild to create symbolic ?22:45:46
@ghadfg:matrix.orgポポロ屏幕截图_20240730_012432.png
Download 屏幕截图_20240730_012432.png
23:24:45
@ghadfg:matrix.orgポポロi don't know what i do wrong23:24:58
@ghadfg:matrix.orgポポロwhy don't have premonition with nix-rebuild ?, Manual linking is no problem at all.23:28:07
1 Aug 2024
@vika:fireburn.ruVika (she/her) changed their profile picture.11:51:56

Show newer messages


Back to Room ListRoom Version: 6