root unlocking is more restrictive
akin to asking for a password
This commit is contained in:
parent
9c116fa8c7
commit
6c9cb09a6f
@ -156,14 +156,13 @@ in {
|
|||||||
];
|
];
|
||||||
authorizedKeys = cfg.sshUnlock.authorizedKeys;
|
authorizedKeys = cfg.sshUnlock.authorizedKeys;
|
||||||
};
|
};
|
||||||
# FIXME vendored change by motiejus
|
postCommands = ''
|
||||||
#postCommands = ''
|
tee -a /root/.profile >/dev/null <<EOF
|
||||||
# tee -a /root/.profile >/dev/null <<EOF
|
if zfs load-key rpool/nixos; then
|
||||||
# if zfs load-key rpool/nixos; then
|
pkill zfs
|
||||||
# pkill zfs
|
fi
|
||||||
# fi
|
exit
|
||||||
# exit
|
EOF'';
|
||||||
# EOF'';
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
})
|
})
|
||||||
|
Loading…
Reference in New Issue
Block a user