Commit Graph

86 Commits

Author SHA1 Message Date
Ilan Joselevich
52e7ab3910
Use writeShellApplication for packaging 2023-01-10 23:05:47 +02:00
Paul Haerle
28ce0f04e5
Merge pull request #20 from phaer/disk-encryption-key-pipes
allow pipes for --disk-encryption-keys...
2023-01-05 16:34:58 +01:00
Paul Haerle
1d55c40328
fix: umask 077 for disk_encryption_keys
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2023-01-05 16:28:42 +01:00
phaer
84939c7bb0 appease shellcheck 2023-01-04 20:11:32 +01:00
phaer
d57dc3d750 allow pipes for --disk-encryption-keys...
this allows passing multiple disk encryption keys, some of which
might come in the form of unix pipes.

It can be used with bash file substition facilities to pass a secret
to the remote machine without writing it locally to disk.

Example

--disk-encryption-keys /tmp/disk-1.key <(echo "my-secret")
--disk-encryption-keys /tmp/disk-2.key /tmp/static-file.key
2023-01-04 20:02:23 +01:00
bors[bot]
e4f04317f7
Merge #19
19: tests: simplify ssh keys by not using ssh-agent r=Mic92 a=Mic92



Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
2023-01-04 08:42:15 +00:00
Jörg Thalheim
039bd20578 also build github pages in staging 2023-01-04 09:41:33 +01:00
Jörg Thalheim
3e4e1730ce add bors support 2023-01-04 09:40:01 +01:00
Jörg Thalheim
96f2125082 tests: simplify ssh keys by not using ssh-agent 2023-01-04 09:31:50 +01:00
lassulus
d03bb48320 README: lassulus/flakes-testing -> numtide/nixos-remote-examples 2023-01-03 15:24:15 +01:00
lassulus
996a79461f fix facts on non nixos systems 2023-01-03 12:31:26 +00:00
Jörg Thalheim
a2e236b582
Merge pull request #14 from phaer/phaer-installer-files
Add --disk-encryption-keys option
2022-12-31 13:08:19 +00:00
Jörg Thalheim
7598e1a03c unique test names 2022-12-31 14:05:36 +01:00
Jörg Thalheim
1d00a9babd test --disk-encryption-keys in sudo test 2022-12-31 14:05:36 +01:00
Paul Haerle
c20cb13ab8 fix /mnt/tmp permissions
Co-authored-by: Jörg Thalheim <Mic92@users.noreply.github.com>
2022-12-31 14:05:36 +01:00
phaer
5ddab885a6 add --no-reboot...
alternative would be use --stop-after [disko|install].

test: add --no-reboot
2022-12-31 14:05:36 +01:00
Paul Haerle
d2947ff6f2 Don't preserve local permissions for disk encryption files 2022-12-31 13:16:25 +01:00
Paul Haerle
2d3cc225b3 Add --disk-encryption-keys option 2022-12-31 13:16:25 +01:00
Lassulus
b79af208e9
Merge pull request #17 from numtide/reboot 2022-12-31 13:03:46 +01:00
Jörg Thalheim
29f63a12ca extend README 2022-12-31 12:55:20 +01:00
Jörg Thalheim
185b1ea4ba add curl as runtime dependency 2022-12-31 12:54:17 +01:00
Jörg Thalheim
69353c0b59 fix sudo support and add test 2022-12-30 19:39:20 +01:00
Jörg Thalheim
74741d593d test: don't wait for installed sshd
nixos-remote should handle this itself already.
2022-12-30 19:29:47 +01:00
Jörg Thalheim
b0d9b17dc0 modularized nixos tests using new nixos test interface 2022-12-30 19:29:47 +01:00
Jörg Thalheim
9b29fd7ee0 allow symlinks for --store-paths
nix copy is otherwise picky about it.
2022-12-30 19:26:16 +01:00
Jörg Thalheim
3bb170080f refactor to add fact gathering phase
This allows us to use sudo properly and handle more conditionals
locally. I.e. nix-remote will now fallback to local curl if no curl/wget
has been found on the server.
2022-12-30 19:26:16 +01:00
Jörg Thalheim
6e4ed4f43e add no-reboot option 2022-12-30 11:24:26 +01:00
Jörg Thalheim
6107c3928a skip ssh-copy-id when machine is already kexeced 2022-12-30 11:20:27 +01:00
Jörg Thalheim
f2d7372f08
Merge pull request #15 from phaer/rsync-perms
Don't preserve local permissions for --extra-files
2022-12-29 23:43:31 +00:00
Paul Haerle
ac25b31ef4 Don't preserve local permissions for --extra-files 2022-12-29 19:38:14 +01:00
Lassulus
48cfc83b28
Merge pull request #16 from numtide/ipv6-support 2022-12-29 17:26:10 +01:00
Jörg Thalheim
56584a09c6 fix ipv6 address support 2022-12-29 17:18:46 +01:00
lassulus
8ed88da369 add --stop-after-disko paramter 2022-12-27 19:43:41 +01:00
Lassulus
b645ee84ff
Merge pull request #13 from numtide/kuutamo 2022-12-24 21:37:53 +01:00
lassulus
78433074aa allow direct building of test 2022-12-24 21:27:07 +01:00
Jörg Thalheim
06a1067c03 respect debugging option also when installing 2022-12-23 20:37:49 +01:00
Jörg Thalheim
5890f28f7c flake: add missing locks 2022-12-23 20:37:49 +01:00
Jörg Thalheim
b5c78ab85a nixos-test: enable --debug option 2022-12-23 20:37:49 +01:00
Jörg Thalheim
fd5dd53a51 add --extra-files option 2022-12-23 20:37:49 +01:00
Jonas Chevalier
363d29d9b2
Create LICENSE 2022-12-23 11:44:25 +01:00
Jörg Thalheim
b36676a8f0
Merge pull request #12 from numtide/kuutamo
nixos-remote: DHCP is no longer a requirement
2022-12-23 10:29:32 +00:00
Jörg Thalheim
8b41ac3cd0 nixos-remote: DHCP is no longer a requirement 2022-12-23 11:29:18 +01:00
Jörg Thalheim
682174af4b
Merge pull request #11 from numtide/kuutamo
nixos-test: use evaluated kexec image
2022-12-23 10:27:55 +00:00
Jörg Thalheim
a13702601a nixos-test: use evaluated kexec image 2022-12-23 11:22:23 +01:00
zimbatm
932cf2331b
CI: publish docs to github pages 2022-12-21 19:43:45 +01:00
Jörg Thalheim
a5504c8b55
Merge pull request #10 from numtide/add-docs
add minimal docs framework
2022-12-21 18:38:10 +00:00
zimbatm
bcdaaa94ec
add minimal docs framework 2022-12-21 19:36:39 +01:00
zimbatm
170ef13bfb
remove POSIX sh
Use [[ ]] everywhere, use :- instead of +x
2022-12-21 19:07:29 +01:00
Jonas Chevalier
8db4c0a233
Merge pull request #6 from numtide/terraform
flakeify
2022-12-21 19:01:35 +01:00
zimbatm
32ba35c4ee
add shellcheck test 2022-12-21 18:53:39 +01:00