root unlocking is more restrictive

akin to asking for a password
This commit is contained in:
Motiejus Jakštys 2023-07-23 16:04:45 +03:00
parent 9c116fa8c7
commit 6c9cb09a6f
1 changed files with 7 additions and 8 deletions

View File

@ -156,14 +156,13 @@ in {
]; ];
authorizedKeys = cfg.sshUnlock.authorizedKeys; authorizedKeys = cfg.sshUnlock.authorizedKeys;
}; };
# FIXME vendored change by motiejus postCommands = ''
#postCommands = '' tee -a /root/.profile >/dev/null <<EOF
# tee -a /root/.profile >/dev/null <<EOF if zfs load-key rpool/nixos; then
# if zfs load-key rpool/nixos; then pkill zfs
# pkill zfs fi
# fi exit
# exit EOF'';
# EOF'';
}; };
}; };
}) })