From 84c8848c6f71e8d84a72689b6e1068eafaf29f5a Mon Sep 17 00:00:00 2001 From: Artemis Tosini Date: Wed, 24 Feb 2021 18:48:19 +0000 Subject: [PATCH] Remove challenge response auth, authorize spike to build --- sets/builder.nix | 1 + sets/ssh.nix | 1 + system/spike/default.nix | 1 + 3 files changed, 3 insertions(+) diff --git a/sets/builder.nix b/sets/builder.nix index 4393e37..5d201d8 100644 --- a/sets/builder.nix +++ b/sets/builder.nix @@ -9,6 +9,7 @@ useDefaultShell = true; openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFOBdARV3DVx4fKTf1hCSmOz+S06pI28cvrdo+FbWDP/ root@rainbowdash" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIElCYORRBERl/as01Obp1Og/mdy28V7gw32uCZseOSZt root@spike" ]; }; } diff --git a/sets/ssh.nix b/sets/ssh.nix index f4e667c..ac4e491 100644 --- a/sets/ssh.nix +++ b/sets/ssh.nix @@ -4,6 +4,7 @@ services.openssh = { enable = true; passwordAuthentication = false; + challengeResponseAuthentication = false; }; # users.users.artemis.openssh.authorizedKeys.keys set in private } diff --git a/system/spike/default.nix b/system/spike/default.nix index 1f01dc8..f78e02b 100644 --- a/system/spike/default.nix +++ b/system/spike/default.nix @@ -9,6 +9,7 @@ ../../sets/hacking.nix ../../sets/laptop.nix ../../sets/ssh.nix + ../../sets/buildMachines.nix ../../sets/workstation.nix ];