From 26080c39fec7e9f2b30c8cd1a01bfcb424f9e86d Mon Sep 17 00:00:00 2001
From: Artemis Tosini <me@artem.ist>
Date: Fri, 18 Dec 2020 05:36:57 +0000
Subject: [PATCH] Allow rainbowdash to build on starlight

---
 sets/builder.nix             | 14 ++++++++++++++
 system/starlight/default.nix |  1 +
 2 files changed, 15 insertions(+)
 create mode 100644 sets/builder.nix

diff --git a/sets/builder.nix b/sets/builder.nix
new file mode 100644
index 0000000..4393e37
--- /dev/null
+++ b/sets/builder.nix
@@ -0,0 +1,14 @@
+{ config, ... }:
+
+{
+  nix.trustedUsers = [ "build" ];
+  users.users.build = {
+    isNormalUser = false;
+    home = "/home/build";
+    createHome = true;
+    useDefaultShell = true;
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFOBdARV3DVx4fKTf1hCSmOz+S06pI28cvrdo+FbWDP/ root@rainbowdash"
+    ];
+  };
+}
diff --git a/system/starlight/default.nix b/system/starlight/default.nix
index 863969c..7224540 100644
--- a/system/starlight/default.nix
+++ b/system/starlight/default.nix
@@ -5,6 +5,7 @@
     ./boot-config.nix
     ./hardware-configuration.nix
     ../../private/starlight.nix
+    ../../sets/builder.nix
     ../../sets/cpu/amd.nix
     ../../sets/fpga.nix
     ../../sets/gpu/amd.nix