1 diff --git a/nixos/modules/installer/ssh-nixos.nix b/nixos/modules/installer/ssh-nixos.nix
3 index 00000000000..52ac88799ee
5 +++ b/nixos/modules/installer/ssh-nixos.nix
7 +{ pkgs, lib, config, ... }:
10 + inherit (config) networking;
11 + cfg = config.installer.ssh-nixos;
12 + nixRunDefaultCommand = "bash";
13 + ssh = pkgs.writeShellScriptBin "ssh" ''
17 + ssh -l '${cfg.login}' \
18 + ${lib.escapeShellArgs cfg.sshFlags} ''${SSH_FLAGS:-} "$@"
22 +options.installer.ssh-nixos = {
23 + PATH = lib.mkOption {
24 + type = types.listOf types.package;
26 + apply = lib.makeBinPath;
27 + description = "Packages to be appended to the <literal>PATH<literal> of the script.";
29 + script = lib.mkOption {
34 + gpg --decrypt initrd/ssh.key.gpg |
35 + ssh root@''${config.installer.ssh-nixos.target} \
36 + install -D -m 400 -o root -g root /dev/stdin /root/initrd/ssh.key
40 + Install script copying the configured NixOS to the <link linkend="opt-install.ssh-nixos.target">target</link>
41 + and switching to the new configuration.
42 + It is made available here for prepending or appending commands
43 + with the usual <literal>mkBefore</literal> and <literal>mkAfter</literal>.
44 + In case you run it often or add multiple ssh calls to it,
45 + consider configuring the OpenSSH client with <literal>ControlMaster auto</literal>
46 + to keep the SSH connexion alive between calls to <literal>literal</literal>.
48 + This script is usually run with:
50 + <prompt>$ </prompt> nix run system.config.installer.ssh-nixos -f nixos.nix
52 + where <literal>nixos.nix</literal> can be:
54 + import <nixpkgs/nixos> {
55 + system = "x86_64-linux";
56 + configuration = { config, lib, pkgs }: {
57 + # Your usual configuration.nix content can go here
62 + apply = script: pkgs.writeShellScriptBin nixRunDefaultCommand ''
65 + export OLDPATH=$PATH:${cfg.PATH}
66 + PATH="${ssh}/bin:$OLDPATH"
71 + login = lib.mkOption {
75 + description = "Login name passed to ssh.";
77 + target = lib.mkOption {
79 + default = "${networking.hostName}.${networking.domain}";
80 + example = "192.168.1.10";
81 + description = "Destination where to install NixOS passed to ssh.";
83 + sshFlags = lib.mkOption {
84 + type = types.listOf types.str;
85 + default = ["-o" "ControlMaster=auto"];
87 + Extra flags passed to <literal>ssh</literal>.
88 + Environment variable <literal>SSH_FLAGS</literal> can also be used at runtime.
91 + nixCopyFlags = lib.mkOption {
92 + type = types.listOf types.str;
93 + default = ["--substitute-on-destination"];
95 + Extra flags passed to <literal>nix copy</literal>.
96 + Environment variable <literal>NIX_COPY_FLAGS</literal> can also be used at runtime.
99 + profile = lib.mkOption {
101 + default = "/nix/var/nix/profiles/system";
105 + installer.ssh-nixos.PATH = with pkgs; [nix openssh];
106 + installer.ssh-nixos.script =
107 + let nixos = config.system.build.toplevel; in ''
108 + nix ''${NIX_FLAGS:-} copy \
109 + --to ssh://'${cfg.target}' \
110 + ${lib.escapeShellArgs cfg.nixCopyFlags} ''${NIX_COPY_FLAGS:-} \
112 + ssh '${cfg.target}' \
113 + nix-env --profile '${cfg.profile}' --set '${nixos}' '&&' \
114 + '${cfg.profile}'/bin/switch-to-configuration "''${NIXOS_SWITCH:-switch}"
117 +meta.maintainers = [ lib.maintainers.julm ];
119 diff --git a/nixos/modules/module-list.nix b/nixos/modules/module-list.nix
120 index f361163ca63..15659fde11b 100644
121 --- a/nixos/modules/module-list.nix
122 +++ b/nixos/modules/module-list.nix
124 ./i18n/input-method/ibus.nix
125 ./i18n/input-method/nabi.nix
126 ./i18n/input-method/uim.nix
127 + ./installer/ssh-nixos.nix
128 ./installer/tools/tools.nix
129 ./misc/assertions.nix