From dc36a47ac9bad278a110a1bae6d955f67ca02075 Mon Sep 17 00:00:00 2001
From: beatzaplenty <wayne.bennett@live.com>
Date: Mon, 27 Jul 2026 06:06:53 +1000
Subject: [PATCH] test-lab/ha: add session key + enable qemu-guest-agent

Add nixos@nixos session key so the Claude Code session can SSH into
test VMs directly.  Also enable services.qemuGuest.enable so
qm guest exec works as a fallback for key injection.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 test-lab/ha/common.nix | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/test-lab/ha/common.nix b/test-lab/ha/common.nix
index 01659e0..1cc4f00 100644
--- a/test-lab/ha/common.nix
+++ b/test-lab/ha/common.nix
@@ -62,7 +62,14 @@ in
     enable = true;
     settings.PermitRootLogin = "yes";
   };
-  users.users.root.openssh.authorizedKeys.keys = [ vars.adminSshKey ];
+  users.users.root.openssh.authorizedKeys.keys = [
+    vars.adminSshKey
+    # Claude Code session key (this machine) — test-lab only
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGygkCljN6uKpdJbHTOQtn8ZnH+wKXDLAwrDFbLrE/65 nixos@nixos"
+  ];
+
+  # Allow QEMU guest exec for key injection fallback
+  services.qemuGuest.enable = true;
 
   # ── Networking ────────────────────────────────────────────────────────
   networking.useDHCP = false;