micqdf/TerraHome
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'fix: preconfigure remote nix trusted-users before rebuild' (#56) from stage into master
Some checks failed
Terraform Apply / Terraform Apply (push) Failing after 6m40s
Details

Browse Source 
Reviewed-on: #56
This commit was merged in pull request #56.
This commit is contained in:
micqdf
2026-02-28 20:58:58 +00:00
parent 727c21e43b cf98bdf229
commit f5675d2a84
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
nixos/kubeadm/scripts/rebuild-and-bootstrap.sh
View File

@@ -130,6 +130,15 @@ rebuild_node() {
--use-remote-sudo
}
prepare_remote_nix_trust() {
local node_ip="$1"
echo "==> Ensuring nix trusted-users on $node_ip"
remote "$node_ip" "sudo mkdir -p /etc/nix"
remote "$node_ip" "if [ -f /etc/nix/nix.conf ]; then sudo sed -i '/^trusted-users[[:space:]]*=/d' /etc/nix/nix.conf; fi"
remote "$node_ip" "echo 'trusted-users = root micqdf' | sudo tee -a /etc/nix/nix.conf >/dev/null"
remote "$node_ip" "sudo systemctl restart nix-daemon 2>/dev/null || true"
}
populate_nodes
prepare_known_hosts
export NIX_SSHOPTS="$SSH_OPTS"
@@ -143,10 +152,12 @@ ACTIVE_SSH_USER="$SSH_USER"
detect_ssh_user "$PRIMARY_CP_IP"
for node in "${CP_NAMES[@]}"; do
prepare_remote_nix_trust "${NODE_IPS[$node]}"
rebuild_node "$node" "${NODE_IPS[$node]}"
done
for node in "${WK_NAMES[@]}"; do
prepare_remote_nix_trust "${NODE_IPS[$node]}"
rebuild_node "$node" "${NODE_IPS[$node]}"
done