server-configuration's Introduction

Ringer's server

To add yourself, please add the following to configuration.nix:

  users.users.<name> = {
    isNormalUser = true;
    openssh.authorizedKeys.keys = [
      "ssh-rsa AAAAB3NzaC1yc2etc/etc/etcjwrsh8e596z6J0l7 example@host"
    ];
  };

Local configuration

To connect to the build machine, you will need to add this to your ~/.ssh/config:

Host jonringer
  HostName <will be sent to you>
  Port <will be sent to you>
  User alice
  IdentitiesOnly yes
  IdentityFile /home/alice/.ssh/id_rsa
  ForwardAgent yes # enables use of local ssh agent (e.g. for github)
  RemoteForward /run/user/$remote_uid/gnupg/S.gpg-agent /run/user/$uid/gnupg/S.gpg-agent.extra # for gpg signing (optional)

You will need to replace alice, $remote_uid, and $uid. (change host name if you want)

After applying the changes, you should be able to do:

ssh jonringer

To sign in.

Nix binary cache

It might be useful in certain cases to use this server as a binary cache. For example, if a jobset is made for a PR that you're iterating on.

WARNING: This server isn't held to the same security standards as the official hydra instance. Care should be taken to avoid using binary packages from any 3rd party (this server included).

binaryCaches = [ "https://cache.jonringer.us" ];
binaryCachePublicKeys = [ "cache.jonringer.us:c06xmyNNX/uG4j7db3flzcz08Yi3rBkpdaLuZKrZvwIEZqv5fn8vpPY1CKR4OrX977Aw9g/4axmzHr/QdqD4BA==" ];

Recommend Projects