| 7 Mar 2024 |
fricklerhandwerk | Google Season of Docs applications are now open: https://developers.google.com/season-of-docs/docs/timeline | 21:42:43 |
Philip Taron (UTC-8) | In reply to @jade_:matrix.org unsure. i think the rc file isn't read at all, yeah? then i think some sshd config drop in ought to be added to the installer unless you have better ideas I wonder if we couldn't do something in nixpkgs that would be a ready-to-go sshd that's specific to ssh-ng 🤔 | 21:44:39 |
Philip Taron (UTC-8) | In reply to @jade_:matrix.org unsure. i think the rc file isn't read at all, yeah? then i think some sshd config drop in ought to be added to the installer unless you have better ideas * I wonder if we couldn't do something in nixpkgs that would be a ready-to-go sshd that's specific to ssh-ng 🤔
As in, it doesn't depend on outside state, and is configured exclusively for use with being used as a Nix builder.
| 21:45:40 |
@jade_:matrix.org | In reply to @philiptaron:matrix.org
I wonder if we couldn't do something in nixpkgs that would be a ready-to-go sshd that's specific to ssh-ng 🤔
As in, it doesn't depend on outside state, and is configured exclusively for use with being used as a Nix builder.
the actual more reasonable thing here is a ssh service/subsystem/whateveritis like sftp | 21:48:56 |
Philip Taron (UTC-8) | In reply to @jade_:matrix.org the actual more reasonable thing here is a ssh service/subsystem/whateveritis like sftp Now that's a flavor I haven't heard in forever. Does anyone else do that?! | 21:49:30 |
@jade_:matrix.org | subsystem seems like the absolute cleanest way of doing this tbqh, but putting PATH stuff in a drop in for sshd_config somewhere would also work | 21:55:44 |
Philip Taron (UTC-8) | In reply to @jade_:matrix.org subsystem seems like the absolute cleanest way of doing this tbqh, but putting PATH stuff in a drop in for sshd_config somewhere would also work Do you see a way of doing a drop-in style config? sshd_config isn't making me see any. I agree after reading the docs on subsystem that a nix subsystem would be 🔥 | 22:12:49 |
@jade_:matrix.org | at least archlinux has /etc/ssh/sshd_config.d | 22:14:48 |
Philip Taron (UTC-8) | In reply to @jade_:matrix.org subsystem seems like the absolute cleanest way of doing this tbqh, but putting PATH stuff in a drop in for sshd_config somewhere would also work * Do you see a way of doing a drop-in style config? sshd_config isn't making me see any. I agree after reading the docs on subsystem that a nix or nix-daemon subsystem would be 🔥 | 22:14:50 |
@jade_:matrix.org | but i am guessing it is a distro thing maybe? | 22:15:04 |
Philip Taron (UTC-8) | That would be super lame. | 22:15:14 |
Philip Taron (UTC-8) | Of course it is: https://manpages.debian.org/unstable/openssh-server/sshd_config.5.en.html
Note that the Debian openssh-server package sets several options as standard in /etc/ssh/sshd_config which are not the default in sshd(8):
Include /etc/ssh/sshd_config.d/*.conf
| 22:23:46 |
@jade_:matrix.org | fixing bad distro decisions in the installer seems a bit questionable, because of peoples jank configuration management systems or suchlike | 22:36:32 |
Philip Taron (UTC-8) | yeah, running a completely separate sshd seems more kosher to me. | 23:00:30 |
| pbsds joined the room. | 23:13:13 |
pbsds | i'm looking at a doc PR which has a 23.11 backport label. Is it common to backport doc fixups? | 23:14:07 |