DGNum/infrastructure
11
6
Fork 2
Code Issues 20 Pull requests 13 Projects 1 Releases Packages Wiki Activity Actions

feat(keys): add builder-specific keys

Browse source 
For remote building, keys are usually isolated from the main keys.

This enables another list of keys to add.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
This commit is contained in:
Ryan Lahfa 2025-02-06 01:23:32 +01:00
parent c5623896f3
commit 5ca85e3430
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
keys/default.nix
View file

@ -81,7 +81,14 @@ rec {
];
};
_builder_keys = {
raito = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA3hCOyFwuoCLt5W9e9yQSwj9I+VspB0kNNHsoFngbgZ Nix remote builder key"
];
};
getKeys = ls: builtins.concatLists (builtins.map (member: _keys.${member} or [ ]) ls);
getBuilderKeys = member: _builder_keys.${member} or [ ];
mkSecrets =
nodes: setDefault { publicKeys = unique (rootKeys ++ (builtins.concatMap getNodeKeys' nodes)); };