Branch: refs/heads/master
  Home:   https://github.com/NixOS/nixops
  Commit: 79857da39416627aaff214f5bfaca3e8a2867461
      
https://github.com/NixOS/nixops/commit/79857da39416627aaff214f5bfaca3e8a2867461
  Author: aszlig <[email protected]>
  Date:   2015-10-26 (Mon, 26 Oct 2015)

  Changed paths:
    M nixops/backends/none.py

  Log Message:
  -----------
  backends/none: Use dedicated SSH keypair.

This should make the "none" backend a bit more useful as we only need to
provide a key _or_ passphrase on machine creation and from thereon we
only use the SSH keys within NixOps' state database.

If you have a large set of "none" machines and want to export/import
them, this should no longer require to move around ssh_configs or even
entries in your hosts file.

In addition, this fixes the situation where you need to build on the
target machines and the none backend wasn't able to provide a private
key for the to be generated nix.machines file.

Signed-off-by: aszlig <[email protected]>


  Commit: dbfd18091eb234fb74092c051229b9c2f2e0bb61
      
https://github.com/NixOS/nixops/commit/dbfd18091eb234fb74092c051229b9c2f2e0bb61
  Author: aszlig <[email protected]>
  Date:   2015-10-26 (Mon, 26 Oct 2015)

  Changed paths:
    M nixops/backends/none.py

  Log Message:
  -----------
  backends/none: Correctly check for existence.

We now set up a vm_id, so on "nixops check" we can properly show whether
the target machine exists or not.

Signed-off-by: aszlig <[email protected]>


  Commit: d17847af4c9484db9c99056634bab3b5da62076d
      
https://github.com/NixOS/nixops/commit/d17847af4c9484db9c99056634bab3b5da62076d
  Author: aszlig <[email protected]>
  Date:   2015-10-26 (Mon, 26 Oct 2015)

  Changed paths:
    M nixops/backends/none.py

  Log Message:
  -----------
  backends/none: Provide a resource ID value.

The value is the vm_id we generated on create() and currently is more or
less just for consistency and to check whether the vm_id exists on
"nixops info".

Signed-off-by: aszlig <[email protected]>


  Commit: 0a8b6025798c0bf560d369b7f93c0cc32c28dd85
      
https://github.com/NixOS/nixops/commit/0a8b6025798c0bf560d369b7f93c0cc32c28dd85
  Author: aszlig <[email protected]>
  Date:   2015-10-26 (Mon, 26 Oct 2015)

  Changed paths:
    M tests/none-backend.nix

  Log Message:
  -----------
  tests/none: Remove SSH key after first deploy.

This ensures that the test will fail, should nixops still try to use the
external SSH key.

Signed-off-by: aszlig <[email protected]>


  Commit: 35293efadb4ed4edeef9c9cde864addbf5b831ff
      
https://github.com/NixOS/nixops/commit/35293efadb4ed4edeef9c9cde864addbf5b831ff
  Author: aszlig <[email protected]>
  Date:   2015-10-26 (Mon, 26 Oct 2015)

  Changed paths:
    M nixops/backends/none.py
    M tests/none-backend.nix

  Log Message:
  -----------
  backends/none: Write pubkey with trailing newline.

Thanks to @joelteon for noticing this. We obviously don't want to break
ssh-copy-id nor our own implementation if we want to add another public
key.

Also add a test to ensure this won't break in the future.

Signed-off-by: aszlig <[email protected]>


  Commit: 8ad1138859ac6ddb0a977873e25a226c2b73ad8d
      
https://github.com/NixOS/nixops/commit/8ad1138859ac6ddb0a977873e25a226c2b73ad8d
  Author: aszlig <[email protected]>
  Date:   2015-10-26 (Mon, 26 Oct 2015)

  Changed paths:
    M nixops/backends/none.py
    M tests/none-backend.nix

  Log Message:
  -----------
  backends/none: Deploy SSH key via physical spec.

We now no longer create a .ssh/authorized_keys file, as suggested by
@edolstra in:

https://github.com/NixOS/nixops/pull/201#issuecomment-49752969

The key is created in the machine state and passed via the physical
specification and we're checking for the cur_toplevel in the machine
state to ensure that we've deployed already.

So until the first deployment, NixOps (or better OpenSSH) either asks
for a password or if there's a key available uses the external key.

That way, we can also deploy configurations with users.mutableUsers set
to false, because it requires to either have a password or a key set in
the configuration and otherwise won't build.

Of course, we also adapted the VM test to properly test for this change.

Signed-off-by: aszlig <[email protected]>


  Commit: 03e308ae830d8bacd79f526d1c0eab356c660e32
      
https://github.com/NixOS/nixops/commit/03e308ae830d8bacd79f526d1c0eab356c660e32
  Author: Eelco Dolstra <[email protected]>
  Date:   2015-10-26 (Mon, 26 Oct 2015)

  Changed paths:
    M nixops/backends/none.py
    M tests/none-backend.nix

  Log Message:
  -----------
  Merge pull request #201 from aszlig/none-improvements

Use dedicated SSH keypair for "none" backend.


Compare: https://github.com/NixOS/nixops/compare/e2c3201f0a19...03e308ae830d
_______________________________________________
nix-commits mailing list
[email protected]
http://lists.science.uu.nl/mailman/listinfo/nix-commits

Reply via email to