···

       
9
       
9
       
 
       
  boot.vesa = false;

     

       
10
       
10
       
 
       


     

       
11
       
11
       
 
       
  # Don't start a tty on the serial consoles.

     

       
12
       
12
       
-
       
  systemd.services."serial-getty@ttyS0".enable = false;

     

       
12
       
12
       
+
       
  systemd.services."serial-getty@ttyS0".enable = lib.mkDefault false;

     

       
13
       
13
       
 
       
  systemd.services."serial-getty@hvc0".enable = false;

     

       
14
       
14
       
 
       
  systemd.services."getty@tty1".enable = false;

     

       
15
       
15
       
 
       
  systemd.services."autovt@".enable = false;

     

···

       
18
       
18
       
 
       
in

     

       
19
       
19
       
 
       


     

       
20
       
20
       
 
       
{

     

       
21
       
21
       
-
       
  imports = [ ../profiles/headless.nix ./ec2-data.nix ./amazon-init.nix ];

     

       
21
       
21
       
+
       
  imports = [

     

       
22
       
22
       
+
       
    ../profiles/headless.nix

     

       
23
       
23
       
+
       
    # Note: While we do use the headless profile, we also explicitly

     

       
24
       
24
       
+
       
    # turn on the serial console on ttyS0 below. This is because

     

       
25
       
25
       
+
       
    # AWS does support accessing the serial console:

     

       
26
       
26
       
+
       
    # https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configure-access-to-serial-console.html

     

       
27
       
27
       
+
       
    ./ec2-data.nix

     

       
28
       
28
       
+
       
    ./amazon-init.nix

     

       
29
       
29
       
+
       
  ];

     

       
22
       
30
       
 
       


     

       
23
       
31
       
 
       
  config = {

     

       
24
       
32
       
 
       


     
···

       
140
       
148
       
 
       
    # at instance creation time.

     

       
141
       
149
       
 
       
    services.openssh.enable = true;

     

       
142
       
150
       
 
       
    services.openssh.permitRootLogin = "prohibit-password";

     

       
151
       
151
       
+
       


     

       
152
       
152
       
+
       
    # Enable the serial console on ttyS0

     

       
153
       
153
       
+
       
    systemd.services."serial-getty@ttyS0".enable = true;

     

       
143
       
154
       
 
       


     

       
144
       
155
       
 
       
    # Creates symlinks for block device names.

     

       
145
       
156
       
 
       
    services.udev.packages = [ pkgs.ec2-utils ];