···

       
17
       
17
       
 
       


     

       
18
       
18
       
 
       
  knownHosts = map (h: getAttr h cfg.knownHosts) (attrNames cfg.knownHosts);

     

       
19
       
19
       
 
       


     

       
20
       
20
       
-
       
  knownHostsFile = pkgs.writeText "ssh_known_hosts" (

     

       
21
       
21
       
-
       
    flip concatMapStrings knownHosts (h: ''

     

       
22
       
22
       
-
       
      ${concatStringsSep "," h.hostNames} ${if h.publicKey != null then h.publicKey else readFile h.publicKeyFile}

     

       
23
       
23
       
-
       
    '')

     

       
24
       
24
       
-
       
  );

     

       
20
       
20
       
+
       
  knownHostsFile = pkgs.runCommand "ssh_known_hosts" {} ''

     

       
21
       
21
       
+
       
    #!${pkgs.bash}/bin/bash

     

       
22
       
22
       
+
       
    ${flip concatMapStrings knownHosts (h: ''

     

       
23
       
23
       
+
       
      pubkeyfile=${builtins.toFile "host.pub" (if h.publicKey == null then readFile h.publicKeyFile else h.publicKey)}

     

       
24
       
24
       
+
       
      ${pkgs.gnused}/bin/sed 's/^/${concatStringsSep "," h.hostNames} /' $pubkeyfile >> $out

     

       
25
       
25
       
+
       
    '')}

     

       
26
       
26
       
+
       
  '';

     

       
25
       
27
       
 
       


     

       
26
       
28
       
 
       
  userOptions = {

     

       
27
       
29
       
 
       


     
···

       
254
       
256
       
 
       
            description = ''

     

       
255
       
257
       
 
       
              The public key data for the host. You can fetch a public key

     

       
256
       
258
       
 
       
              from a running SSH server with the <command>ssh-keyscan</command>

     

       
257
       
257
       
-
       
              command.

     

       
259
       
259
       
+
       
              command. The public key should not include any host names, only

     

       
260
       
260
       
+
       
              the key type and the key itself. It is allowed to add several

     

       
261
       
261
       
+
       
              lines here, each line will be treated as type/key pair and the

     

       
262
       
262
       
+
       
              host names will be prepended to each line.

     

       
258
       
263
       
 
       
            '';

     

       
259
       
264
       
 
       
          };

     

       
260
       
265
       
 
       
          publicKeyFile = mkOption {

     
···

       
264
       
269
       
 
       
              The path to the public key file for the host. The public

     

       
265
       
270
       
 
       
              key file is read at build time and saved in the Nix store.

     

       
266
       
271
       
 
       
              You can fetch a public key file from a running SSH server

     

       
267
       
267
       
-
       
              with the <command>ssh-keyscan</command> command.

     

       
272
       
272
       
+
       
              with the <command>ssh-keyscan</command> command. The content

     

       
273
       
273
       
+
       
              of the file should follow the same format as described for

     

       
274
       
274
       
+
       
              the <literal>publicKey</literal> option.

     

       
268
       
275
       
 
       
            '';

     

       
269
       
276
       
 
       
          };

     

       
270
       
277
       
 
       
        };