forked from Fediversity/Fediversity
Do not inject pre-made keys
This commit is contained in:
parent
f0224b06c7
commit
46d20a76bc
1 changed files with 3 additions and 6 deletions
|
@ -185,18 +185,15 @@ build_iso () {
|
|||
acquire_lock build
|
||||
printf 'Building ISO for VM %s...\n' "$2"
|
||||
|
||||
## FIXME: Support injecting host keys for test VMs (but not for production
|
||||
## VMs as that would be unsafe).
|
||||
|
||||
nix build \
|
||||
--impure --expr "
|
||||
let flake = builtins.getFlake (builtins.toString ./.); in
|
||||
flake.lib.makeInstallerIso {
|
||||
nixosConfiguration = flake.nixosConfigurations.$2;
|
||||
nixpkgs = flake.inputs.nixpkgs;
|
||||
hostKeys = {
|
||||
ed25519 = {
|
||||
private = ./deployment/hostKeys/$2/ssh_host_ed25519_key;
|
||||
public = ./deployment/hostKeys/$2/ssh_host_ed25519_key.pub;
|
||||
};
|
||||
};
|
||||
}
|
||||
" \
|
||||
--log-format raw --quiet \
|
||||
|
|
Loading…
Add table
Reference in a new issue