ngrikpfx
This commit is contained in:
parent
b0b11375bd
commit
581e70042e
|
@ -2,12 +2,10 @@
|
||||||
let
|
let
|
||||||
usb_label = "my_usb";
|
usb_label = "my_usb";
|
||||||
usb_path = "/usb";
|
usb_path = "/usb";
|
||||||
|
keyPath = "/home/chaos/.ssh/id_ed25519";
|
||||||
onInsert = pkgs.writeShellScriptBin "usb-on-insert" ''
|
onInsert = pkgs.writeShellScriptBin "usb-on-insert" ''
|
||||||
umount /usb || true
|
umount /usb || true
|
||||||
mount $(findfs LABEL=${usb_label}) -o rw,umask=600,uid=chaos,gid=root,fmask=0022,dmask=0022 ${usb_path}
|
mount $(findfs LABEL=${usb_label}) -o rw,umask=600,uid=chaos,gid=root,fmask=0022,dmask=0022 ${usb_path}
|
||||||
touch /home/chaos/.ssh/id_ed25519 /home/chaos/.ssh/id_ed25519.pub
|
|
||||||
bindfs -n -r -p 0700 -o nonempty /usb/ssh-keys/chaos.priv /home/chaos/.ssh/id_ed25519
|
|
||||||
bindfs -n -r -p 0700 -o nonempty /usb/ssh-keys/chaos.pub /home/chaos/.ssh/id_ed25519.pub
|
|
||||||
'';
|
'';
|
||||||
in {
|
in {
|
||||||
systemd.tmpfiles.rules = [ "d ${usb_path} - chaos root" ];
|
systemd.tmpfiles.rules = [ "d ${usb_path} - chaos root" ];
|
||||||
|
|
Loading…
Reference in a new issue