zimbatm
1120774e38
nixos-rebuild: fix SSH key security race
...
Make sure the ssh_key file is always 0700
2023-03-29 16:17:28 +02:00
bors[bot]
ee5c39fcb1
Merge #78
...
78: terraform: allow nixos-rebuild to use specified private key for deployment r=Lassulus a=jfroche
Co-authored-by: Jean-François Roche <jfroche@affinitic.be>
Co-authored-by: Samuel Rounce <srounce@users.noreply.github.com>
2023-03-29 10:13:49 +00:00
Samuel Rounce
5adb698f51
fix(terraform/nixos-rebuild): typo in variables.sh
2023-03-29 09:09:21 +01:00
Jean-François Roche
16143cd8c0
terraform: allow nixos-rebuild to use specified private key for deployment
...
`nixos-rebuild/deploy.sh` script enable ssh authentication with a given private key
through the `SSH_KEY` environment variable.
Add additional variable for the private key used for the deployment.
To encourage the use of ssh-agent and discourage the storage of deployment keys in the terraform state
we do not set the install ssh key as the default for the deployment key.
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2023-03-28 00:28:48 +02:00
bors[bot]
ad954defb3
Merge #77
...
77: wait for machine to be shutdown after deploy r=Lassulus a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-03-05 10:44:49 +00:00
Jörg Thalheim
5be3e00d57
wait for machine to be shutdown after deploy
2023-03-04 17:13:54 +01:00
bors[bot]
b7e335a5f8
Merge #76
...
76: nixos-rebuild: allow to change deploy user r=Lassulus a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-03-04 13:33:08 +00:00
Jörg Thalheim
48fe2fa8cc
nixos-rebuild: allow to change deploy user
2023-03-04 13:53:20 +01:00
bors[bot]
6d0e9235bd
Merge #75
...
75: nixos-rebuild: allow to change deploy user r=Lassulus a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-03-03 14:31:47 +00:00
Jörg Thalheim
c2f70ed844
nixos-rebuild: allow to change deploy user
2023-03-03 14:47:03 +01:00
bors[bot]
63b9af6c33
Merge #74
...
74: make nix find the right flake r=Mic92 a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-03-01 10:47:37 +00:00
Jörg Thalheim
c0c5fcce92
make nix find the right flake
2023-03-01 11:36:25 +01:00
bors[bot]
ff743f3183
Merge #72
...
72: Terraform module fixes r=Mic92 a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-24 11:47:28 +00:00
bors[bot]
a1d93f94df
Merge #73
...
73: quote flake attr to allow dots in nixos hostname r=Mic92 a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-24 07:29:31 +00:00
Jörg Thalheim
dfd9b256b1
quote flake attr to allow dots in nixos hostname
2023-02-24 08:28:30 +01:00
Jörg Thalheim
ed67349b96
terraform: improve module description
2023-02-23 17:10:09 +01:00
Jörg Thalheim
29b0f1b5f2
terraform: add instance_id to trigger reinstall
2023-02-23 16:15:52 +01:00
Jörg Thalheim
ed0ab16c58
terraform: drop dependency on the retry program
2023-02-23 16:15:52 +01:00
Jörg Thalheim
ac7f3b86a5
terraform: actually passthru kexec-url to nixos-anywhere
2023-02-22 16:42:55 +01:00
Jörg Thalheim
bedcb063cc
fixup ssh key name for rsync
2023-02-22 16:42:55 +01:00
Jörg Thalheim
2abdb32c67
terraform/nix-build: fix building from non-flake
2023-02-22 16:42:55 +01:00
Jörg Thalheim
23bbd22fb2
add debug logging option
2023-02-22 16:42:55 +01:00
Jörg Thalheim
57a6ec5ffc
terraform/install: fix nixos-anywhere flake attribute name
2023-02-22 16:42:49 +01:00
bors[bot]
bc0e634c95
Merge #21
...
21: add terraform role and some minor changes r=Lassulus a=Lassulus
Co-authored-by: lassulus <lassulus@lassul.us>
Co-authored-by: lassulus <git@lassul.us>
2023-02-14 07:22:16 +00:00
lassulus
9e00da86f5
add newline to ssh key provided via env
2023-02-14 07:34:24 +01:00
lassulus
411fb9bd76
terraform: init modules
2023-02-14 07:34:24 +01:00
lassulus
1b976d803c
tests: fix running tests directly with nix-build
2023-02-14 07:34:24 +01:00
bors[bot]
716988d42e
Merge #70
...
70: docs: clean after serve r=phaer a=zimbatm
Co-authored-by: zimbatm <zimbatm@zimbatm.com>
2023-02-09 11:59:27 +00:00
zimbatm
90beb2b579
docs: clean after serve
...
Don't pollute the tmpdir with old versions of the serve
2023-02-09 12:17:50 +01:00
bors[bot]
5b6fd8fd5a
Merge #68
...
68: Rsync permissions r=Mic92 a=Mic92
Co-authored-by: Pogobanane <aenderboy@gmx.de>
2023-02-09 09:40:02 +00:00
Pogobanane
1d9ba4c702
nixos-remote-pxe: fix mkdir -p not setting permissions if folder already exists
2023-02-09 10:34:50 +01:00
bors[bot]
9b1ebfc3df
Merge #67
...
67: nixos-remote: use installed ssh key also for rsync r=Mic92 a=Mic92
Co-authored-by: Pogobanane <aenderboy@gmx.de>
2023-02-09 09:33:38 +00:00
Pogobanane
c1ebc5f57a
nixos-remote: use installed ssh key also for rsync
2023-02-09 10:32:44 +01:00
bors[bot]
74c8547240
Merge #66
...
66: prefer system's openssh r=phaer a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-07 09:17:43 +00:00
Jörg Thalheim
53951b7424
prefer system's openssh
...
fixes https://github.com/numtide/nixos-anywhere/issues/62
2023-02-07 09:21:54 +01:00
bors[bot]
8dd7a0e460
Merge #65
...
65: .github/settings.yml: update homepage r=phaer a=zowoq
Co-authored-by: zowoq <59103226+zowoq@users.noreply.github.com>
2023-02-07 06:53:51 +00:00
zowoq
2a470d0b4e
.github/settings.yml: update homepage
2023-02-07 08:52:27 +10:00
bors[bot]
193a88b21a
Merge #64
...
64: Change 'remote' -> 'anywhere' r=Mic92 a=paulmattei
Co-authored-by: paulmattei <38218340+paulmattei@users.noreply.github.com>
2023-02-06 21:02:29 +00:00
paulmattei
776d6f7ba4
Change 'remote' -> 'anywhere'
2023-02-06 20:50:32 +00:00
bors[bot]
6a29ad9d12
Merge #60
...
60: add pogobanane as contributor r=Mic92 a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-06 10:22:28 +00:00
Jörg Thalheim
b3af80ef38
add pogobanane as contributor ( #60 )
2023-02-06 10:21:32 +00:00
Jörg Thalheim
9d83c80caa
add pogobanane as contributor
2023-02-06 11:20:42 +01:00
bors[bot]
c2237b4988
Merge #59
...
59: Update github settings w.r.t. repo name r=Mic92 a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-05 12:20:58 +00:00
Jörg Thalheim
7524c3afd9
.github/settings: update repo name
2023-02-05 13:20:25 +01:00
bors[bot]
4471f09b22
Merge #55
...
55: README: update logo link r=Mic92 a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-02 09:17:49 +00:00
Jörg Thalheim
0a772d5df0
README: point to main branch for logo
2023-02-02 10:16:07 +01:00
bors[bot]
3bfcd2b421
Merge #54
...
54: make background in logo white r=Mic92 a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-02 09:14:22 +00:00
Jörg Thalheim
73f33f6f5b
make background white and add license to logo
2023-02-02 10:13:21 +01:00
bors[bot]
5853f6716f
Merge #53
...
53: Improve documentation r=Mic92 a=Mic92
Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-02 07:24:23 +00:00
Jörg Thalheim
733ca7be85
reformat with prettier
2023-02-02 08:23:43 +01:00