tvl-depot/users
William Carroll b810956802 feat(wpcarro/terraform): Support SSH
Supporting SSH turned-out to be a bit of a saga... Thank you @espes and @grfn
for the pointers.

Problem: When I originally setup my Google VM, I followed this tutorial,
https://nixos.wiki/wiki/Install_NixOS_on_GCE, so I ended-up installing
`nixos-20-03`: an older version of NixOS, (the newest version in `gsutils ls -l
gs://nixos-images`). Critically, I missed this important footnote:

> NOTE: Newer images (from 20.09 on) won't be available at the bucket above, and
> will instead need to be found at
> <nixpkgs/nixos/modules/virtualisation/gce-images.nix>.

It turns out that *newer* images include this script...
https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/virtualisation/fetch-instance-ssh-keys.bash
...which reads the key, "sshKeys", from the Google metadata server and copies
the value into /root/.ssh/authorized_keys.

To make matters a bit misleading, the NixOS script expects the key to be
"sshKeys", but Google deprecated that in favor of "ssh-keys" (hence why both
versions appear in this commit).

TL;DR:
- upgrading to a newer NixOS image
- adding an empty access_config block so Google will assign my VM an external IP
- removing oslogin (not necessary to do, and I may add it back later)
- adding my public SSH key as metadata

Change-Id: If624fe77afd47b31fa7be0a1dd4a55512317eef0
Reviewed-on: https://cl.tvl.fyi/c/depot/+/4737
Tested-by: BuildkiteCI
Reviewed-by: wpcarro <wpcarro@gmail.com>
Autosubmit: wpcarro <wpcarro@gmail.com>
2021-12-29 18:49:57 +00:00
..
cynthia feat(cynthia): add SSH CA 2020-09-27 23:14:12 +00:00
edef fix(edef/keys): add readTree header 2020-08-05 02:21:47 +00:00
ericvolp12 chore(users/ericvolp12): Create ericvolp12 user directory and OWNERS file 2020-06-16 02:37:07 +00:00
eta chore(eta/keys): add eta's new yubikey-agent SSH key 2021-04-11 14:20:25 +00:00
firefly feat(users/firefly): initialize with key for as 2020-09-28 13:41:40 +00:00
flokli feat(ops/nixos/whitby): add flokli user 2021-03-26 20:31:48 +00:00
grfn fix(grfn/bbbg): Allow importing empty attendee lists 2021-12-27 15:59:46 +00:00
isomer chore(whitby): Move isomer's SSH key to user directory 2020-07-23 19:32:15 +00:00
lukegb chore(lukegb): add keys.clouvider-lon01-nix 2020-11-30 23:18:39 +00:00
Profpatsch feat(users/Profpatsch): add git-db 2021-12-26 16:34:51 +00:00
qyliss feat(whitby): Add SSH key for qyliss 2020-07-23 19:37:09 +00:00
riking feat(u/riking/dotfiles): add tmux.conf 2021-03-01 22:31:13 +00:00
sterni feat(sterni/aoc/2021): day 10 solution 2021-12-28 16:42:41 +00:00
tazjin feat(users/tazjin/hanebuschtag): schabernackensteak 2021-12-26 17:05:05 +00:00
wpcarro feat(wpcarro/terraform): Support SSH 2021-12-29 18:49:57 +00:00
zseri docs(zseri): Add RFC document dbwospof.md 2021-12-29 01:59:12 +00:00
tvlbot.jpg chore(users/tazjin): Add avatar for tvlbot 2020-06-14 22:23:04 +00:00