Add buildImage shell function for building lxc-* tarballs with host keys #3

Merged

beatzaplenty merged 1 commits from worktree-fizzy-juggling-sedgewick into main 2026-07-20 07:14:00 +00:00

Conversation 0 Commits 1 Files Changed 1

+21

beatzaplenty commented 2026-07-20 07:13:37 +00:00

Owner

Copy Link

Copy Source

lxc-* hosts need NIXOS_HOST_KEYS_DIR + --impure to bake in a pre-seeded
SSH host key, otherwise sops-nix's .sops.yaml recipient never matches
and every secret permanently fails to decrypt on first boot. That
invocation is easy to forget, so wrap it as buildImage <flake-target>
alongside the existing Switch-nix/Test-nix helpers.

Co-Authored-By: Claude Sonnet 5 noreply@anthropic.com

lxc-* hosts need NIXOS_HOST_KEYS_DIR + --impure to bake in a pre-seeded SSH host key, otherwise sops-nix's .sops.yaml recipient never matches and every secret permanently fails to decrypt on first boot. That invocation is easy to forget, so wrap it as `buildImage <flake-target>` alongside the existing Switch-nix/Test-nix helpers. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

beatzaplenty added 1 commit 2026-07-20 07:13:44 +00:00

Add buildImage shell function for building lxc-* tarballs with host keys ... 460459cda1

lxc-* hosts need NIXOS_HOST_KEYS_DIR + --impure to bake in a pre-seeded
SSH host key, otherwise sops-nix's .sops.yaml recipient never matches
and every secret permanently fails to decrypt on first boot. That
invocation is easy to forget, so wrap it as `buildImage <flake-target>`
alongside the existing Switch-nix/Test-nix helpers.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

beatzaplenty merged commit f4a2d2d830 into main 2026-07-20 07:14:00 +00:00

beatzaplenty referenced this issue from a commit 2026-07-20 10:47:29 +00:00

Merge pull request #3 from beatz174-bit/codex/implement-flake.lock-automation-in-nixos-26sknf

beatzaplenty referenced this issue from a commit 2026-07-20 10:47:30 +00:00

Merge pull request 'Add buildImage shell function for building lxc-* tarballs with host keys' (#3) from worktree-fizzy-juggling-sedgewick into main

This repo is archived. You cannot comment on pull requests.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

beatzaplenty

No Assignees

1 Participants

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: beatzaplenty/nixos#3