···

       
2
       
2
       
 
       
  name = "systemd-initrd-network-ssh";

     

       
3
       
3
       
 
       
  meta.maintainers = [ lib.maintainers.elvishjerricco ];

     

       
4
       
4
       
 
       


     

       
5
       
5
       
-
       
  nodes = with lib; {

     

       
5
       
5
       
+
       
  nodes = {

     

       
6
       
6
       
 
       
    server = { config, pkgs, ... }: {

     

       
7
       
7
       
-
       
      environment.systemPackages = [pkgs.cryptsetup];

     

       
7
       
7
       
+
       
      environment.systemPackages = [ pkgs.cryptsetup ];

     

       
8
       
8
       
 
       
      boot.loader.systemd-boot.enable = true;

     

       
9
       
9
       
 
       
      boot.loader.timeout = 0;

     

       
10
       
10
       
 
       
      virtualisation = {

     

       
11
       
11
       
 
       
        emptyDiskImages = [ 4096 ];

     

       
12
       
12
       
 
       
        useBootLoader = true;

     

       
13
       
13
       
-
       
        # Booting off the encrypted disk requires an available init script from the Nix store

     

       
13
       
13
       
+
       
        # Booting off the encrypted disk requires an available init script from

     

       
14
       
14
       
+
       
        # the Nix store

     

       
14
       
15
       
 
       
        mountHostNixStore = true;

     

       
15
       
16
       
 
       
        useEFIBoot = true;

     

       
16
       
17
       
 
       
      };

     
···

       
26
       
27
       
 
       
          enable = true;

     

       
27
       
28
       
 
       
          ssh = {

     

       
28
       
29
       
 
       
            enable = true;

     

       
29
       
29
       
-
       
            authorizedKeys = [ (readFile ./initrd-network-ssh/id_ed25519.pub) ];

     

       
30
       
30
       
+
       
            authorizedKeys = [ (lib.readFile ./initrd-network-ssh/id_ed25519.pub) ];

     

       
30
       
31
       
 
       
            port = 22;

     

       
31
       
32
       
 
       
            # Terrible hack so it works with useBootLoader

     

       
32
       
33
       
 
       
            hostKeys = [ { outPath = "${./initrd-network-ssh/ssh_host_ed25519_key}"; } ];

     
···

       
38
       
39
       
 
       
    client = { config, ... }: {

     

       
39
       
40
       
 
       
      environment.etc = {

     

       
40
       
41
       
 
       
        knownHosts = {

     

       
41
       
41
       
-
       
          text = concatStrings [

     

       
42
       
42
       
+
       
          text = lib.concatStrings [

     

       
42
       
43
       
 
       
            "server,"

     

       
43
       
44
       
 
       
            "${

     

       
44
       
44
       
-
       
              toString (head (splitString " " (toString

     

       
45
       
45
       
-
       
                (elemAt (splitString "\n" config.networking.extraHosts) 2))))

     

       
45
       
45
       
+
       
              toString (lib.head (lib.splitString " " (toString

     

       
46
       
46
       
+
       
                (lib.elemAt (lib.splitString "\n" config.networking.extraHosts) 2))))

     

       
46
       
47
       
 
       
            } "

     

       
47
       
47
       
-
       
            "${readFile ./initrd-network-ssh/ssh_host_ed25519_key.pub}"

     

       
48
       
48
       
+
       
            "${lib.readFile ./initrd-network-ssh/ssh_host_ed25519_key.pub}"

     

       
48
       
49
       
 
       
          ];

     

       
49
       
50
       
 
       
        };

     

       
50
       
51
       
 
       
        sshKey = {