This commit is contained in:
ChaotiCryptidz 2022-02-14 17:45:46 +00:00
parent b0b11375bd
commit 581e70042e

View file

@ -2,12 +2,10 @@
let
usb_label = "my_usb";
usb_path = "/usb";
keyPath = "/home/chaos/.ssh/id_ed25519";
onInsert = pkgs.writeShellScriptBin "usb-on-insert" ''
umount /usb || true
mount $(findfs LABEL=${usb_label}) -o rw,umask=600,uid=chaos,gid=root,fmask=0022,dmask=0022 ${usb_path}
touch /home/chaos/.ssh/id_ed25519 /home/chaos/.ssh/id_ed25519.pub
bindfs -n -r -p 0700 -o nonempty /usb/ssh-keys/chaos.priv /home/chaos/.ssh/id_ed25519
bindfs -n -r -p 0700 -o nonempty /usb/ssh-keys/chaos.pub /home/chaos/.ssh/id_ed25519.pub
'';
in {
systemd.tmpfiles.rules = [ "d ${usb_path} - chaos root" ];