Commit Graph

362 Commits

Author SHA1 Message Date
f782c15aae Fixes for procul. 2021-10-19 13:16:13 -07:00
8bd9b6f466 Require a master key. 2021-10-19 12:50:46 -07:00
58f989b968 Bad var name. 2021-10-19 12:49:14 -07:00
8459d63697 Some procul secrets are set elsewhere now. 2021-10-19 12:47:26 -07:00
5383cea338 Networks aren't a function 2021-10-19 10:04:35 -07:00
409f341fbb Daaamn NFS is a pain 2021-10-18 21:55:24 -07:00
0a460f3374 Attempted to fix initrd-network 2021-10-18 09:07:49 -07:00
b1b5e69a1c instance.site -> instance.local-site 2021-10-18 08:46:38 -07:00
3d5d7e389e Working mounted encrypted file system! Neat. 2021-10-18 08:40:35 -07:00
eef580d596 Create groups for encrypted filesystems 2021-10-18 07:19:13 -07:00
cbf87fe8cf Ensure mountpoints exist 2021-10-18 07:03:01 -07:00
0a6f6b794d Various fixes to sea-store 2021-10-17 23:33:07 -07:00
41951b56ea fs.filesystem, not filesystem 2021-10-17 23:17:43 -07:00
44fcc8e262 Oops, mounts shouldn't be a list, should be attrs. 2021-10-17 23:16:46 -07:00
56cea847f4 Try to get sea-store working 2021-10-17 23:12:49 -07:00
c9815b4caf Ooof, to -> To 2021-10-17 22:36:01 -07:00
5fb426f365 Corrected typo 2021-10-17 22:34:22 -07:00
b9067e7f13 Add initial support for encrypted filesystems. 2021-10-17 22:10:26 -07:00
db108dde93 Give sea-camera a break, it's hitting too hard 2021-10-17 14:03:28 -07:00
90dafdf8e1 Ensure proper perms for /var/hom 2021-10-17 14:00:42 -07:00
8a260cf13b state should be noexec 2021-10-16 18:08:51 -07:00
1be71b13ab Merged with upstream 2021-10-15 23:25:01 -07:00
a53807f888 Make sure backplane client homedir exists 2021-10-15 23:23:00 -07:00
455bdf4942 Give socrates root 12G to work with. 2021-10-15 17:39:24 -07:00
7cf751b013 Enable initrd ssh on limina 2021-10-15 15:37:04 -07:00
bd03f8c4f5 Include openssh as a dep 2021-10-15 15:23:41 -07:00
18618c9c2a Apparently writeText doesn't exist in pkgs? 2021-10-15 15:22:21 -07:00
210a19d12c writeTextFile -> writeText 2021-10-15 15:20:43 -07:00
7ea906162e writeTextFile -> builtins.writeTextFile 2021-10-15 15:18:50 -07:00
3bf763c124 This shit is so weird 2021-10-15 15:17:45 -07:00
a0fd17c9ca Fuckin FORCE it 2021-10-15 14:29:02 -07:00
c4fa73c8e7 Force empty secrets 2021-10-15 14:27:33 -07:00
23d2a4de70 Just fuckin remove the whole thing
bet this doesn't work
2021-10-15 14:25:22 -07:00
437203721b Ugh, extra n 2021-10-15 14:21:30 -07:00
8a78f2d830 Ugh, (submodule ...) 2021-10-15 14:20:04 -07:00
0c3fd5b522 Okay, let's make sure private-key-file is a string 2021-10-15 14:14:38 -07:00
bab995346e Make sure it's really a list of lists 2021-10-15 14:00:44 -07:00
174abdf990 Corrected sshfp records.
Also, though, is nixops not picking this up?
2021-10-15 13:49:11 -07:00
51546ec7fd Fiiiine, I'll just use a local fuckin file. 2021-10-15 12:57:48 -07:00
0330f6ae78 Ahh fuck this wtf 2021-10-15 10:58:47 -07:00
095876e12d Try again 2021-10-15 10:57:04 -07:00
c3fc069f34 Let's just verify... 2021-10-15 10:54:09 -07:00
ea8d7c9007 What if I hardcode the path? 2021-10-15 10:49:01 -07:00
9b3333616d Was that just totally irrelevant? 2021-10-15 10:42:32 -07:00
b3258ad8a2 Try dumping the path...why is it refering to store 2021-10-15 10:40:10 -07:00
e6252d551a Fuck a secret then 2021-10-15 10:38:07 -07:00
054ff9758c Sigh...try a fixed path again. 2021-10-15 10:36:16 -07:00
870c90b679 These initrd secrets are annoying...
Betting this won't work.
2021-10-15 10:30:43 -07:00
4e62739086 Oops, didn't escape the attr name. 2021-10-15 10:11:26 -07:00
11f1560410 Ugh...it was a function. 2021-10-15 10:03:14 -07:00