* In the implementation of the ‘authorizedKeys’, don't delete all
lines below a certain marker. This is undesirable because commands like "ssh-copy-id" add keys to the end of the file. Instead mark all automatically added lines individually. svn path=/nixos/trunk/; revision=33918
This commit is contained in:
parent
e3470145e0
commit
43215ff80f
@ -73,7 +73,7 @@ let
|
||||
|
||||
mkAuthkeyScript =
|
||||
let
|
||||
marker1 = "### NixOS will regenerate this line and every line below it.";
|
||||
marker1 = "### NixOS auto-added key. Do not edit!";
|
||||
marker2 = "### NixOS will regenerate this file. Do not edit!";
|
||||
users = map (userName: getAttr userName config.users.extraUsers) (attrNames config.users.extraUsers);
|
||||
usersWithKeys = flip filter users (u:
|
||||
@ -98,7 +98,7 @@ let
|
||||
|
||||
for f in $authKeyFiles; do
|
||||
if [ -f "$f" ]; then
|
||||
authKeys="$(${pkgs.coreutils}/bin/cat "$f"),$authKeys"
|
||||
authKeys="$(${pkgs.coreutils}/bin/cat "$f") ${marker1},$authKeys"
|
||||
fi
|
||||
done
|
||||
|
||||
@ -110,8 +110,7 @@ let
|
||||
rm -f "$authfile"
|
||||
authKeys="${marker2},$authKeys"
|
||||
else
|
||||
${pkgs.gnused}/bin/sed -i '/^### NixOS.*$/,$d' "$authfile"
|
||||
authKeys="${marker1},$authKeys"
|
||||
${pkgs.gnused}/bin/sed -i '/${marker1}/ d' "$authfile"
|
||||
fi
|
||||
for key in $authKeys; do ${pkgs.coreutils}/bin/echo "$key" >> "$authfile"; done
|
||||
fi
|
||||
|
Loading…
Reference in New Issue
Block a user