NixOS configuration for HPC cluster https://docs.hpc.informatik.hs-fulda.de/
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 

39 lines
741 B

{ pkgs, lib, config, ... }:
with lib;
{
nixpkgs.overlays = [
(self: super: {
openssh = super.openssh.overrideAttrs (final: prev: {
patches = prev.patches ++ [
../../patches/openssh-keysign-check-remove.patch
];
});
})
];
programs.ssh = {
extraConfig = ''
EnableSSHKeysign yes
Host node-*.${config.networking.domain} node-*
HostbasedAuthentication yes
'';
};
security.wrappers."ssh-keysign" = {
source = "${pkgs.openssh}/libexec/ssh-keysign";
setuid = true;
owner = "root";
group = "root";
};
users.users."root".packages = [
pkgs.usermgr
];
systemd.tmpfiles.rules = [
''L+ /opt/usermgr - - - - ${pkgs.usermgr}''
];
}