Commit Graph

194 Commits

Author SHA1 Message Date
zimbatm
1120774e38
nixos-rebuild: fix SSH key security race
Make sure the ssh_key file is always 0700
2023-03-29 16:17:28 +02:00
bors[bot]
ee5c39fcb1
Merge #78
78: terraform: allow nixos-rebuild to use specified private key for deployment r=Lassulus a=jfroche



Co-authored-by: Jean-François Roche <jfroche@affinitic.be>
Co-authored-by: Samuel Rounce <srounce@users.noreply.github.com>
2023-03-29 10:13:49 +00:00
Samuel Rounce
5adb698f51
fix(terraform/nixos-rebuild): typo in variables.sh 2023-03-29 09:09:21 +01:00
Jean-François Roche
16143cd8c0 terraform: allow nixos-rebuild to use specified private key for deployment
`nixos-rebuild/deploy.sh` script enable ssh authentication with a given private key
through the `SSH_KEY` environment variable.

Add additional variable for the private key used for the deployment.
To encourage the use of ssh-agent and discourage the storage of deployment keys in the terraform state
we do not set the install ssh key as the default for the deployment key.

Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2023-03-28 00:28:48 +02:00
bors[bot]
ad954defb3
Merge #77
77: wait for machine to be shutdown after deploy r=Lassulus a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-03-05 10:44:49 +00:00
Jörg Thalheim
5be3e00d57 wait for machine to be shutdown after deploy 2023-03-04 17:13:54 +01:00
bors[bot]
b7e335a5f8
Merge #76
76: nixos-rebuild: allow to change deploy user r=Lassulus a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-03-04 13:33:08 +00:00
Jörg Thalheim
48fe2fa8cc nixos-rebuild: allow to change deploy user 2023-03-04 13:53:20 +01:00
bors[bot]
6d0e9235bd
Merge #75
75: nixos-rebuild: allow to change deploy user r=Lassulus a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-03-03 14:31:47 +00:00
Jörg Thalheim
c2f70ed844 nixos-rebuild: allow to change deploy user 2023-03-03 14:47:03 +01:00
bors[bot]
63b9af6c33
Merge #74
74: make nix find the right flake r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-03-01 10:47:37 +00:00
Jörg Thalheim
c0c5fcce92 make nix find the right flake 2023-03-01 11:36:25 +01:00
bors[bot]
ff743f3183
Merge #72
72: Terraform module fixes r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-24 11:47:28 +00:00
bors[bot]
a1d93f94df
Merge #73
73: quote flake attr to allow dots in nixos hostname r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-24 07:29:31 +00:00
Jörg Thalheim
dfd9b256b1 quote flake attr to allow dots in nixos hostname 2023-02-24 08:28:30 +01:00
Jörg Thalheim
ed67349b96 terraform: improve module description 2023-02-23 17:10:09 +01:00
Jörg Thalheim
29b0f1b5f2 terraform: add instance_id to trigger reinstall 2023-02-23 16:15:52 +01:00
Jörg Thalheim
ed0ab16c58 terraform: drop dependency on the retry program 2023-02-23 16:15:52 +01:00
Jörg Thalheim
ac7f3b86a5 terraform: actually passthru kexec-url to nixos-anywhere 2023-02-22 16:42:55 +01:00
Jörg Thalheim
bedcb063cc fixup ssh key name for rsync 2023-02-22 16:42:55 +01:00
Jörg Thalheim
2abdb32c67 terraform/nix-build: fix building from non-flake 2023-02-22 16:42:55 +01:00
Jörg Thalheim
23bbd22fb2 add debug logging option 2023-02-22 16:42:55 +01:00
Jörg Thalheim
57a6ec5ffc terraform/install: fix nixos-anywhere flake attribute name 2023-02-22 16:42:49 +01:00
bors[bot]
bc0e634c95
Merge #21
21: add terraform role and some minor changes r=Lassulus a=Lassulus



Co-authored-by: lassulus <lassulus@lassul.us>
Co-authored-by: lassulus <git@lassul.us>
2023-02-14 07:22:16 +00:00
lassulus
9e00da86f5 add newline to ssh key provided via env 2023-02-14 07:34:24 +01:00
lassulus
411fb9bd76 terraform: init modules 2023-02-14 07:34:24 +01:00
lassulus
1b976d803c tests: fix running tests directly with nix-build 2023-02-14 07:34:24 +01:00
bors[bot]
716988d42e
Merge #70
70: docs: clean after serve r=phaer a=zimbatm



Co-authored-by: zimbatm <zimbatm@zimbatm.com>
2023-02-09 11:59:27 +00:00
zimbatm
90beb2b579
docs: clean after serve
Don't pollute the tmpdir with old versions of the serve
2023-02-09 12:17:50 +01:00
bors[bot]
5b6fd8fd5a
Merge #68
68: Rsync permissions r=Mic92 a=Mic92



Co-authored-by: Pogobanane <aenderboy@gmx.de>
2023-02-09 09:40:02 +00:00
Pogobanane
1d9ba4c702 nixos-remote-pxe: fix mkdir -p not setting permissions if folder already exists 2023-02-09 10:34:50 +01:00
bors[bot]
9b1ebfc3df
Merge #67
67: nixos-remote: use installed ssh key also for rsync r=Mic92 a=Mic92



Co-authored-by: Pogobanane <aenderboy@gmx.de>
2023-02-09 09:33:38 +00:00
Pogobanane
c1ebc5f57a nixos-remote: use installed ssh key also for rsync 2023-02-09 10:32:44 +01:00
bors[bot]
74c8547240
Merge #66
66: prefer system's openssh r=phaer a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-07 09:17:43 +00:00
Jörg Thalheim
53951b7424 prefer system's openssh
fixes https://github.com/numtide/nixos-anywhere/issues/62
2023-02-07 09:21:54 +01:00
bors[bot]
8dd7a0e460
Merge #65
65: .github/settings.yml: update homepage r=phaer a=zowoq



Co-authored-by: zowoq <59103226+zowoq@users.noreply.github.com>
2023-02-07 06:53:51 +00:00
zowoq
2a470d0b4e .github/settings.yml: update homepage 2023-02-07 08:52:27 +10:00
bors[bot]
193a88b21a
Merge #64
64: Change 'remote' -> 'anywhere' r=Mic92 a=paulmattei



Co-authored-by: paulmattei <38218340+paulmattei@users.noreply.github.com>
2023-02-06 21:02:29 +00:00
paulmattei
776d6f7ba4
Change 'remote' -> 'anywhere' 2023-02-06 20:50:32 +00:00
bors[bot]
6a29ad9d12
Merge #60
60: add pogobanane as contributor r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-06 10:22:28 +00:00
Jörg Thalheim
b3af80ef38
add pogobanane as contributor (#60) 2023-02-06 10:21:32 +00:00
Jörg Thalheim
9d83c80caa add pogobanane as contributor 2023-02-06 11:20:42 +01:00
bors[bot]
c2237b4988
Merge #59
59: Update github settings w.r.t. repo name r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-05 12:20:58 +00:00
Jörg Thalheim
7524c3afd9 .github/settings: update repo name 2023-02-05 13:20:25 +01:00
bors[bot]
4471f09b22
Merge #55
55: README: update logo link r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-02 09:17:49 +00:00
Jörg Thalheim
0a772d5df0
README: point to main branch for logo 2023-02-02 10:16:07 +01:00
bors[bot]
3bfcd2b421
Merge #54
54: make background in logo white r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-02 09:14:22 +00:00
Jörg Thalheim
73f33f6f5b
make background white and add license to logo 2023-02-02 10:13:21 +01:00
bors[bot]
5853f6716f
Merge #53
53: Improve documentation r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-02-02 07:24:23 +00:00
Jörg Thalheim
733ca7be85
reformat with prettier 2023-02-02 08:23:43 +01:00