diff options
author | lassulus <git@lassul.us> | 2023-01-26 23:46:51 +0100 |
---|---|---|
committer | lassulus <git@lassul.us> | 2023-01-26 23:46:51 +0100 |
commit | 34360eb931e89b09512091fe819fb59568852441 (patch) | |
tree | 4a7c998e2fe9b5987ea2173873be09ec3163b0e9 /lass/1systems/hilum/flash-stick.sh | |
parent | f10b0ca342af20cdd1f4f25bd47e6f21a115a300 (diff) |
l hilum.r: pass luks passphrase in flash script
Diffstat (limited to 'lass/1systems/hilum/flash-stick.sh')
-rwxr-xr-x[-rw-r--r--] | lass/1systems/hilum/flash-stick.sh | 14 |
1 files changed, 12 insertions, 2 deletions
diff --git a/lass/1systems/hilum/flash-stick.sh b/lass/1systems/hilum/flash-stick.sh index 7b787f92a..17a5fc580 100644..100755 --- a/lass/1systems/hilum/flash-stick.sh +++ b/lass/1systems/hilum/flash-stick.sh @@ -4,14 +4,24 @@ set -efux disk=$1 export NIXPKGS_ALLOW_UNFREE=1 +(umask 077; pass show admin/hilum/luks > /tmp/hilum.luks) +trap 'rm -f /tmp/hilum.luks' EXIT stockholm_root=$(git rev-parse --show-toplevel) ssh root@localhost -t -- $(nix-build \ --no-out-link \ -I nixpkgs=/var/src/nixpkgs \ -I stockholm="$stockholm_root" \ -I secrets="$stockholm_root"/lass/2configs/tests/dummy-secrets \ - -E "with import <nixpkgs> {}; (pkgs.nixos [ { mainDisk = \"$disk\"; disko.rootMountPoint = \"/mnt/hilum\"; } ./physical.nix ]).mountScript" + -E "with import <nixpkgs> {}; (pkgs.nixos [ + { + luksPassFile = \"/tmp/hilum.luks\"; + mainDisk = \"$disk\"; + disko.rootMountPoint = \"/mnt/hilum\"; + } + ./physical.nix + ]).disko" ) +rm -f /tmp/hilum.luks $(nix-build \ --no-out-link \ -I nixpkgs=/var/src/nixpkgs \ @@ -21,7 +31,7 @@ $(nix-build \ --arg force true ) ssh root@localhost << SSH -nixos-install --no-root-password --root /mnt/hilum -I /var/src +NIXOS_CONFIG=/mnt/hilum/var/src/nixos-config nixos-install --no-root-password --root /mnt/hilum -I /var/src nixos-enter --root /mnt/hilum -- nixos-rebuild -I /var/src switch --install-bootloader umount -Rv /mnt/hilum SSH |