kiara/Fediversity
1
0
Fork 0
forked from fediversity/fediversity
Code Pull requests Activity

fix nix-hash

Browse source
This commit is contained in:
Kiara Grouwstra 2025-04-18 16:51:38 +02:00
parent 2fef5c42aa
commit 84e51745f8
1 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
launch/main.tf
View file

@ -37,7 +37,7 @@ locals {
# FIXME settle for pwd when in /nix/store? # FIXME settle for pwd when in /nix/store?
# FIXME calculate separately to reduce false positives # FIXME calculate separately to reduce false positives
data "external" "hash" { data "external" "hash" {
program = ["sh", "-c", "echo '{\"hash\":\"$(nix-hash ..)\"}'"] program = ["sh", "-c", "echo \"{\\\"hash\\\":\\\"$(nix-hash ..)\\\"}\""]
} }
# TF resource to build and deploy NixOS instances. # TF resource to build and deploy NixOS instances.
@ -102,6 +102,13 @@ resource "terraform_data" "nixos" {
]; ];
# nix path for debugging # nix path for debugging
nix.nixPath = [ "${local.nix_path}" ]; nix.nixPath = [ "${local.nix_path}" ];
## FIXME: switch root authentication to users with password-less sudo, see #24
users.users.root.openssh.authorizedKeys.keys = let
keys = import ../keys;
in attrValues keys.contributors ++ [
# allow our panel vm access to the test machines
keys.panel
];
} // } //
# template parameters passed in from TF thru json # template parameters passed in from TF thru json
builtins.fromJSON "${replace(jsonencode({ builtins.fromJSON "${replace(jsonencode({