pyrox.dev
initrd-ssh service: ensure that keys got copied into initrd
Fixes #17927.
+7
-3
nixos/modules/system/boot/initrd-ssh.nix
+7
-3
nixos/modules/system/boot/initrd-ssh.nix
···
93
93
boot.initrd.extraUtilsCommands = ''
94
94
copy_bin_and_libs ${pkgs.dropbear}/bin/dropbear
95
95
cp -pv ${pkgs.glibc.out}/lib/libnss_files.so.* $out/lib
96
+
97
+
${optionalString (cfg.hostRSAKey != null) "install -D ${cfg.hostRSAKey} $out/etc/dropbear/dropbear_rsa_host_key"}
98
+
${optionalString (cfg.hostDSSKey != null) "install -D ${cfg.hostDSSKey} $out/etc/dropbear/dropbear_dss_host_key"}
99
+
${optionalString (cfg.hostECDSAKey != null) "install -D ${cfg.hostECDSAKey} $out/etc/dropbear/dropbear_ecdsa_host_key"}
96
100
'';
97
101
98
102
boot.initrd.extraUtilsCommandsTest = ''
···
108
112
touch /var/log/lastlog
109
113
110
114
mkdir -p /etc/dropbear
111
-
${optionalString (cfg.hostRSAKey != null) "ln -s ${cfg.hostRSAKey} /etc/dropbear/dropbear_rsa_host_key"}
112
-
${optionalString (cfg.hostDSSKey != null) "ln -s ${cfg.hostDSSKey} /etc/dropbear/dropbear_dss_host_key"}
113
-
${optionalString (cfg.hostECDSAKey != null) "ln -s ${cfg.hostECDSAKey} /etc/dropbear/dropbear_ecdsa_host_key"}
115
+
${optionalString (cfg.hostRSAKey != null) "ln -s $extraUtils/etc/dropbear/dropbear_rsa_host_key /etc/dropbear/dropbear_rsa_host_key"}
116
+
${optionalString (cfg.hostDSSKey != null) "ln -s $extraUtils/etc/dropbear/dropbear_dss_host_key /etc/dropbear/dropbear_dss_host_key"}
117
+
${optionalString (cfg.hostECDSAKey != null) "ln -s $extraUtils/etc/dropbear/dropbear_ecdsa_host_key /etc/dropbear/dropbear_ecdsa_host_key"}
114
118
115
119
mkdir -p /root/.ssh
116
120
${concatStrings (map (key: ''