X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=nixops%2Fscripts%2Fsetup;h=58dbf5516bbc9a2656526a3d63af008eded150e6;hb=d823e010d653a6bf33ff232da5f90103be7515b8;hp=55dd9d99d883dc5935a15b7c8a0d6da86e032755;hpb=11234d0798eeb56b2a09bfc66925e782ace465e3;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/nixops/scripts/setup b/nixops/scripts/setup index 55dd9d9..58dbf55 100755 --- a/nixops/scripts/setup +++ b/nixops/scripts/setup @@ -80,47 +80,6 @@ for key in $gpg_keys; do fi done -nix_group=$(stat -c %G /nix/store) -if [ "$nix_group" = "nixbld" ]; then - nix_user="nixbld1" -else - nix_user="$(stat -c %U /nix/store)" -fi - -if [ ! -f /etc/ssh/ssh_rsa_key_nixops ]; then - cat <<-EOF - The key to access private git repositories (websites hosted by the - server) needs to be accessible to nix builders. It will be put in - /etc/ssh/ssh_rsa_key_nixops (sudo right is needed for that) - > pass show $NIXOPS_CONFIG_PASS_SUBTREE_PATH/Nixops/SshKey | sudo tee /etc/ssh/ssh_rsa_key_nixops > /dev/null - > pass show $NIXOPS_CONFIG_PASS_SUBTREE_PATH/Nixops/SshKey.pub | sudo tee /etc/ssh/ssh_rsa_key_nixops.pub > /dev/null - > sudo chmod u=r,go-rwx /etc/ssh/ssh_rsa_key_nixops - > sudo chown $nix_user:$nix_group /etc/ssh/ssh_rsa_key_nixops /etc/ssh/ssh_rsa_key_nixops.pub - Continue? [y/N] - EOF - read y - if [ "$y" = "y" -o "$y" = "Y" ]; then - if ! id -u $nix_user 2>/dev/null >/dev/null; then - echo "User $nix_user seems inexistant, did you install nix?" - exit 1 - fi - mask=$(umask) - umask 0777 - # Don’t forward it directly to tee, it would break ncurse pinentry - key=$(pass show $NIXOPS_CONFIG_PASS_SUBTREE_PATH/Nixops/SshKey) - echo "$key" | sudo tee /etc/ssh/ssh_rsa_key_nixops > /dev/null - sudo chmod u=r,go=- /etc/ssh/ssh_rsa_key_nixops - pubkey=$(pass show $NIXOPS_CONFIG_PASS_SUBTREE_PATH/Nixops/SshKey.pub) - echo "$pubkey" | sudo tee /etc/ssh/ssh_rsa_key_nixops.pub > /dev/null - sudo chmod a=r /etc/ssh/ssh_rsa_key_nixops.pub - sudo chown $nix_user:$nix_group /etc/ssh/ssh_rsa_key_nixops /etc/ssh/ssh_rsa_key_nixops.pub - umask $mask - else - echo "Aborting" - exit 1 - fi -fi - if nix show-config --json | jq -e '.sandbox.value == "true"' >/dev/null; then cat <<-EOF There are some impure derivations in the repo currently (grep __noChroot), please put @@ -136,7 +95,7 @@ fi DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )" source $(dirname $(dirname $DIR))/nix_path_env -nixops="$(nix-build --no-out-link -A nixops "$(dirname $(dirname $DIR))")/bin/nixops" +nixops="$(nix-build --no-out-link "$(dirname $DIR)/custom_nixops.nix")/bin/nixops" export NIXOPS_STATE="$(dirname $DIR)/state/eldiron.nixops" export NIXOPS_DEPLOYMENT="$DeploymentUuid"