dln/dotfiles
0
0
Code Issues Pull requests 1 Activity

nemo: disable pam_rssh (again!) for now as rust 1.80 broke some pkgs

Browse source
This commit is contained in:
Daniel Lundin 2024-08-15 22:36:19 +02:00
parent 95461b403a
commit 3730825295
Signed by: dln
SSH key fingerprint: SHA256:dQy1Xj3UiqJYpKR5ggQ2bxgz4jCH8IF+k3AB8o0kmdI
1 changed files with 17 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

32
hosts/nemo/default.nix
View file

@ -115,20 +115,22 @@
linkConfig.RequiredForOnline = "routable";
};
security = {
pam.services.doas =
{ config, ... }:
{
rules.auth.rssh = {
order = config.rules.auth.ssh_agent_auth.order - 1;
control = "sufficient";
modulePath = "${pkgs.pam_rssh}/lib/libpam_rssh.so";
settings.authorized_keys_command = pkgs.writeShellScript "get-authorized-keys" ''
cat "/etc/ssh/authorized_keys.d/$1"
'';
};
};
};
# FIXME: pam_rssh is broken from rust 1.80 upgrade
# environment.systemPackages = [ pkgs.pam_rssh ];
# security = {
# pam.services.doas =
# { config, ... }:
# {
# rules.auth.rssh = {
# order = config.rules.auth.ssh_agent_auth.order - 1;
# control = "sufficient";
# modulePath = "${pkgs.pam_rssh}/lib/libpam_rssh.so";
# settings.authorized_keys_command = pkgs.writeShellScript "get-authorized-keys" ''
# cat "/etc/ssh/authorized_keys.d/$1"
# '';
# };
# };
# };
services.resolved = {
enable = true;
@ -164,7 +166,7 @@
environment.systemPackages = with pkgs; [
ffado
lm_sensors
pkgs.pam_rssh
# pkgs.pam_rssh
openconnect
];