vinzenz/nixos-configuration
0
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

distributed builds: fix ssh only accepting build key for real

Browse source
This commit is contained in:
müde 2026-05-03 13:46:30 +02:00
parent 704e14251f
commit e394a6e21e
1 changed files with 7 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

12
nixosModules/distributed-builds.nix
View file

@ -102,11 +102,13 @@ in
(lib.mkIf isClient { (lib.mkIf isClient {
programs.ssh = { programs.ssh = {
knownHosts = buildServerKnownHosts; knownHosts = buildServerKnownHosts;
extraConfig = '' extraConfig = lib.concatStringsSep "\n" (
Match Host ${lib.concatStringsSep " " (lib.attrNames buildServerDevices)} User ${buildUser} lib.mapAttrsToList (name: _: ''
IdentityFile ${clientSshKeyPath} Match host ${name} user ${buildUser}
IdentitiesOnly yes IdentityFile ${clientSshKeyPath}
''; IdentitiesOnly yes
'') buildServerDevices
);
}; };
nix = { nix = {
distributedBuilds = buildMachines != [ ]; distributedBuilds = buildMachines != [ ];