NixOS configuration for HPC cluster
https://docs.hpc.informatik.hs-fulda.de/
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
39 lines
741 B
39 lines
741 B
{ pkgs, lib, config, ... }:
|
|
|
|
with lib;
|
|
|
|
{
|
|
nixpkgs.overlays = [
|
|
(self: super: {
|
|
openssh = super.openssh.overrideAttrs (final: prev: {
|
|
patches = prev.patches ++ [
|
|
../../patches/openssh-keysign-check-remove.patch
|
|
];
|
|
});
|
|
})
|
|
];
|
|
|
|
programs.ssh = {
|
|
extraConfig = ''
|
|
EnableSSHKeysign yes
|
|
|
|
Host node-*.${config.networking.domain} node-*
|
|
HostbasedAuthentication yes
|
|
'';
|
|
};
|
|
|
|
security.wrappers."ssh-keysign" = {
|
|
source = "${pkgs.openssh}/libexec/ssh-keysign";
|
|
setuid = true;
|
|
owner = "root";
|
|
group = "root";
|
|
};
|
|
|
|
users.users."root".packages = [
|
|
pkgs.usermgr
|
|
];
|
|
|
|
systemd.tmpfiles.rules = [
|
|
''L+ /opt/usermgr - - - - ${pkgs.usermgr}''
|
|
];
|
|
}
|