Try to get kerberized NFS working

This commit is contained in:
Artemis Tosini 2021-08-01 19:47:11 +00:00
parent a5f006160c
commit 9b93c1cfb5
Signed by: artemist
GPG key ID: ADFFE553DCBB831E
2 changed files with 11 additions and 6 deletions

View file

@ -3,13 +3,14 @@
{ {
krb5 = { krb5 = {
enable = true; enable = true;
libdefaults.default_realm = "ARTEM.IST"; libdefaults.default_realm = "MANEHATTAN.ARTEM.IST";
domain_realm = { domain_realm = {
"artem.ist" = "ARTEM.IST"; "manehattan.artem.ist" = "MANEHATTAN.ARTEM.IST";
".artem.ist" = "ARTEM.IST"; ".manehattan.artem.ist" = "MANEHATTAN.ARTEM.IST";
};
realms."MANEHATTAN.ARTEM.IST" = {
admin_server = "luna.manehattan.artem.ist";
kdc = "luna.manehattan.artem.ist";
}; };
# Get everything else from DNS
realms."ARTEM.IST".admin_server = "manehattan.artem.ist";
}; };
} }

View file

@ -12,12 +12,16 @@
../../sets/laptop.nix ../../sets/laptop.nix
../../sets/1password.nix ../../sets/1password.nix
../../sets/workstation.nix ../../sets/workstation.nix
../../sets/krb5.nix
]; ];
environment.systemPackages = [ environment.systemPackages = [
pkgs.pkgsCross.aarch64-multiplatform.buildPackages.gcc pkgs.pkgsCross.aarch64-multiplatform.buildPackages.gcc
]; ];
boot.supportedFilesystems = [ "nfs4" ];
networking.domain = "manehattan.artem.ist";
networking.hostName = "rainbowdash"; networking.hostName = "rainbowdash";
system.stateVersion = "20.03"; system.stateVersion = "20.03";
} }