mynix/nixos-infect
1
0
Fork 0
mirror of https://github.com/elitak/nixos-infect.git synced 2024-12-22 08:08:29 +03:00
Code Issues Projects Releases Packages Wiki Activity

don't ingest garbage from authorized_keys

Browse source
This commit is contained in:
Eric Litak 2016-04-13 14:02:37 -07:00
parent 41d040d7d9
commit 8de6d61e15
1 changed files with 1 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
nixos-infect
View file

@ -40,19 +40,13 @@
set -ex
# If you have another NixOS host in the cloud, add it here to speed up the
# package downloads. Use "ssh -A" with your key loaded to run the script!
# (also ssh-keygen -R the host so that agent forwarding isn't disabled)
# This also reduces load on NixOS servers, so please make an effort to use it
# whenever possible. Better yet, just clone your VPS using snapshots.
nixos_channel=nixos-unstable
#nixos_channel=nixos-16.03
makeConf() {
# NB <<"EOF" quotes / $ ` in heredocs, <<EOF does not
mkdir -p /etc/nixos
local IFS=$'\n'; keys=($(cat /root/.ssh/authorized_keys))
local IFS=$'\n'; keys=($(grep -vE '^[[:space:]]*(#|$)' /root/.ssh/authorized_keys))
cat > /etc/nixos/configuration.nix << EOF
{ ... }: {
imports = [