fix distributed user setup in remote machine
This commit is contained in:
parent
bfe2079b25
commit
8b88976e02
|
@ -1,24 +1,15 @@
|
||||||
{ pkgs, configVars, ... }:
|
|
||||||
let
|
|
||||||
remoteBuilderIp = configVars.networking.addresses.remote-builder.ip;
|
|
||||||
in
|
|
||||||
{
|
{
|
||||||
nix.distributedBuilds = true;
|
users.users.remotebuild = {
|
||||||
nix.settings.builders-use-substitutes = true;
|
isNormalUser = true;
|
||||||
|
createHome = false;
|
||||||
|
group = "remotebuild";
|
||||||
|
|
||||||
nix.buildMachines = [
|
openssh.authorizedKeys.keyFiles = [
|
||||||
{
|
./remotebuild.pub
|
||||||
hostName = remoteBuilderIp;
|
|
||||||
sshUser = "remotebuild";
|
|
||||||
sshKey = "/root/.ssh/remotebuild";
|
|
||||||
system = pkgs.stdenv.hostPlatform.system;
|
|
||||||
supportedFeatures = [ "nixos-test" "big-parallel" "kvm" ];
|
|
||||||
}
|
|
||||||
];
|
];
|
||||||
|
};
|
||||||
|
|
||||||
sops.secrets = {
|
users.groups.remotebuild = {};
|
||||||
"ssh_keys/root/remotebuild" = {
|
|
||||||
path = "/root/.ssh/remotebuild";
|
nix.settings.trusted-users = ["remotebuild"];
|
||||||
};
|
|
||||||
};
|
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue