ngrikpfx
This commit is contained in:
parent
b0b11375bd
commit
581e70042e
|
@ -2,12 +2,10 @@
|
|||
let
|
||||
usb_label = "my_usb";
|
||||
usb_path = "/usb";
|
||||
keyPath = "/home/chaos/.ssh/id_ed25519";
|
||||
onInsert = pkgs.writeShellScriptBin "usb-on-insert" ''
|
||||
umount /usb || true
|
||||
mount $(findfs LABEL=${usb_label}) -o rw,umask=600,uid=chaos,gid=root,fmask=0022,dmask=0022 ${usb_path}
|
||||
touch /home/chaos/.ssh/id_ed25519 /home/chaos/.ssh/id_ed25519.pub
|
||||
bindfs -n -r -p 0700 -o nonempty /usb/ssh-keys/chaos.priv /home/chaos/.ssh/id_ed25519
|
||||
bindfs -n -r -p 0700 -o nonempty /usb/ssh-keys/chaos.pub /home/chaos/.ssh/id_ed25519.pub
|
||||
'';
|
||||
in {
|
||||
systemd.tmpfiles.rules = [ "d ${usb_path} - chaos root" ];
|
||||
|
|
Loading…
Reference in a new issue