NixOS configuration for HPC cluster https://docs.hpc.informatik.hs-fulda.de/
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

35 lines
691 B

1 year ago
1 year ago
  1. { pkgs, lib, config, ... }:
  2. with lib;
  3. {
  4. nixpkgs.overlays = [
  5. (self: super: {
  6. openssh = super.openssh.overrideAttrs (final: prev: {
  7. patches = prev.patches ++ [
  8. ../../patches/openssh-keysign-check-remove.patch
  9. ];
  10. });
  11. })
  12. ];
  13. programs.ssh = {
  14. extraConfig = ''
  15. EnableSSHKeysign yes
  16. Host node-*.${config.networking.domain} node-*
  17. HostbasedAuthentication yes
  18. '';
  19. };
  20. security.wrappers."ssh-keysign" = {
  21. source = "${pkgs.openssh}/libexec/ssh-keysign";
  22. setuid = true;
  23. owner = "root";
  24. group = "root";
  25. };
  26. users.users."root".packages = [
  27. (pkgs.callPackage ../../packages/usermgr { })
  28. ];
  29. }