john/dendritic
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ssh user certs in home-manager

Browse Source
This commit is contained in:
John Lancaster
2026-07-09 09:01:34 -05:00
parent a0f5783bbc
commit b21bfd6bb4
4 changed files with 51 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/features/ssh/ssh-wrappers.nix
+9 -3
View File
@@ -67,7 +67,10 @@ in
flake.wrappers.signUserWrapper = inputs.wrappers.lib.wrapModule ({config, lib, wlib, ... }: {
imports = [ sshCertConfig ];
config = let cfg = config.ssh-new; in {
config =
let
cfg = config.ssh-new;
in {
binName = "ssh-user-cert-sign";
package = config.pkgs.step-cli;
args = [ "ssh" "certificate" "--sign" ]
@@ -84,11 +87,14 @@ in
flake.wrappers.userCheckWrapper = inputs.wrappers.lib.wrapModule ({config, lib, wlib, ... }: {
imports = [ sshCertConfig ];
config = {
config =
let
cfg = config.ssh-new;
in {
binName = "ssh-user-cert-check";
package = config.pkgs.openssh;
exePath = lib.getExe' config.pkgs.openssh "ssh-keygen";
args = [ "-Lf" "${config.ssh-new.user.keyFile}-cert.pub" ];
args = [ "-Lf" "$HOME/.ssh/${config.ssh-new.user.keyFile}-cert.pub" ];
};
});