dln/dotfiles
0
0
Code Issues Pull requests 1 Activity

nemo: disable pam_rssh (again!) for now as rust 1.80 broke some pkgs

Browse source
This commit is contained in:
Daniel Lundin 2024-08-15 22:36:19 +02:00
parent 95461b403a
commit 3730825295
Signed by: dln
SSH key fingerprint: SHA256:dQy1Xj3UiqJYpKR5ggQ2bxgz4jCH8IF+k3AB8o0kmdI
1 changed files with 17 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

32
hosts/nemo/default.nix
View file

@ -115,20 +115,22 @@
linkConfig.RequiredForOnline = "routable"; linkConfig.RequiredForOnline = "routable";
}; };
security = { # FIXME: pam_rssh is broken from rust 1.80 upgrade
pam.services.doas = # environment.systemPackages = [ pkgs.pam_rssh ];
{ config, ... }: # security = {
{ # pam.services.doas =
rules.auth.rssh = { # { config, ... }:
order = config.rules.auth.ssh_agent_auth.order - 1; # {
control = "sufficient"; # rules.auth.rssh = {
modulePath = "${pkgs.pam_rssh}/lib/libpam_rssh.so"; # order = config.rules.auth.ssh_agent_auth.order - 1;
settings.authorized_keys_command = pkgs.writeShellScript "get-authorized-keys" '' # control = "sufficient";
cat "/etc/ssh/authorized_keys.d/$1" # modulePath = "${pkgs.pam_rssh}/lib/libpam_rssh.so";
''; # settings.authorized_keys_command = pkgs.writeShellScript "get-authorized-keys" ''
}; # cat "/etc/ssh/authorized_keys.d/$1"
}; # '';
}; # };
# };
# };
services.resolved = { services.resolved = {
enable = true; enable = true;
@ -164,7 +166,7 @@
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
ffado ffado
lm_sensors lm_sensors
pkgs.pam_rssh # pkgs.pam_rssh
openconnect openconnect
]; ];