refactor(provision): Phase 3 — remove legacy host-keys/ fallback #59

2026-07-25T11:24:46Z

beatzaplenty commented

2026-07-25 11:24:46 +00:00

Remove the legacy scp -pr host-keys/ fallback in sync_remote_host_keys(). All actively deployed lxc-* hosts now have clan vars. Targets without a clan var now get a clear error and instructions to generate one. Also extend the uncommitted-changes check to cover vars/per-machine/.

Remove the legacy `scp -pr host-keys/` fallback in sync_remote_host_keys(). All actively deployed lxc-* hosts now have clan vars. Targets without a clan var now get a clear error and instructions to generate one. Also extend the uncommitted-changes check to cover vars/per-machine/.

beatzaplenty added 1 commit 2026-07-25 11:24:47 +00:00

refactor(provision): Phase 3 — remove legacy host-keys/ fallback

Check NixOS configurations / eval-hosts (pull_request) Successful in 10m22s

Details

e8c4122460

All actively deployed lxc-* hosts now have clan vars. Remove the legacy
scp -pr host-keys/ fallback in sync_remote_host_keys(): instead of
silently copying the gitignored directory, error clearly if no clan var
exists for the target and tell the operator how to generate one.

Also extend the uncommitted-changes check to cover vars/per-machine/ in
addition to .sops.yaml and secrets/, since clan vars must be committed
before the remote build git-pulls them.

Update the script header and sync_remote_host_keys comment to reflect
the new clan-only key flow.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01B2EJ4qTsM5KUqhS5c3GAwx

beatzaplenty merged commit 5e2ff76cf7 into main

2026-07-25 11:24:55 +00:00

This repo is archived. You cannot comment on pull requests.

1 Participants

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: beatzaplenty/nixos#59