Comparing changes
Open a pull request
base repository: NixOS/nixops
base: 304a1d39abda
head repository: NixOS/nixops
compare: d12bac6b1660
- 16 commits
- 7 files changed
- 3 contributors
Commits on May 2, 2020
-
Add support for non-root deployments
This adds a new `deployment` configuration attribute (`targetUser`). To inherit the username from the local user issuing the deployment set: ``` deployment.targetUser = null; ``` Setting this to a string will deploy as that user. This option defaults to "root". ### We assume the following for non-root deploys: - Passwordless sudo (no TTY allocation possible) I'm using the following NixOS configuration ``` security.pam.services.sudo.sshAgentAuth = true; security.pam.enableSSHAgentAuth = true; ``` - The deployment user is trusted by the Nix daemon ``` nix.trustedUsers = [ "adisbladis" ]; ``` This is required because of nix-copy-closure. Closes #730
-
-
-
-
-
deployment.privilegeEscalationCommand: Add note about ending privileg…
…e escalation command with --
-
Make an explicit targetUser required (dont suppor the None) case
This is so that we won't get inconsistencies between different subcommands like `nixops send-keys` (which doesn't eval) the deployment attributes. This change should be reverted at a later date when we have made these commands evaluate the configuration.
Commits on May 4, 2020
-
-
-
script_defs: Parse path for nixops mount directly using the passed ma…
…chine Also extend `nixops mount` with full support for all SSH arguments.
-
-
Co-authored-by: Cole Helbling <cole.e.helbling@outlook.com>
-
nixops ssh,mount: document the interaction with targetUser
Co-authored-by: Cole Helbling <cole.e.helbling@outlook.com>
Commits on May 5, 2020
-
Merge pull request #1270 from adisbladis/non-root-deploys
Add support for non-root deployments
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff 304a1d39abda...d12bac6b1660