Tested in an external qemu
Generally works but if malobeo.disks.storage.enable is true you have to manually import and unlock the storage pool in the init-ssh
Tested in an external qemu
Generally works but if `malobeo.disks.storage.enable` is true you have to manually import and unlock the storage pool in the init-ssh
ahtlon
self-assigned this 2024-12-31 12:45:50 +01:00
restrict the ssh to only allow key input (instead of a full shell)
automaticly unlock storage pool with a keyfile on the zroot pool
dhcp (maybe qemu problem)
keep ssh keys consistant per host
documentation
fix nix run -L .\#nixosConfigurations.<host>.config.system.build.vmWithDisko (testing option?)
Import problem is solved.
Todo:
- [x] boot unlock script
- [ ] restrict the ssh to only allow key input (instead of a full shell)
- [ ] automaticly unlock storage pool with a keyfile on the zroot pool
- [ ] dhcp (maybe qemu problem)
- [ ] keep ssh keys consistant per host
- [x] documentation
- [ ] fix `nix run -L .\#nixosConfigurations.<host>.config.system.build.vmWithDisko` (testing option?)
dont think so. in the future we can lookinto auto generating our nixosModule documentation.
do you wanna fix the open todos before merge or should we make issues out of them instead?
> Is there anything I missed in the documentation?
dont think so. in the future we can lookinto auto generating our nixosModule documentation.
do you wanna fix the open todos before merge or should we make issues out of them instead?
ahtlon
marked the pull request as ready for review 2025-01-05 20:38:44 +01:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Tested in an external qemu
Generally works but if
malobeo.disks.storage.enableis true you have to manually import and unlock the storage pool in the init-sshImport problem is solved.
Todo:
nix run -L .\#nixosConfigurations.<host>.config.system.build.vmWithDisko(testing option?)Is there anything I missed in the documentation?
dont think so. in the future we can lookinto auto generating our nixosModule documentation.
do you wanna fix the open todos before merge or should we make issues out of them instead?
48a10fe8aetoa5d6cd6455I think merging now (or soon) and making issues is a better option since I now have less time.
I opened the issues #46 #47 #48 #49 and #50 to fix later. This can now be merged.