This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

beatzaplentyandClaude Sonnet 5 fd773b65da Fix nix-cache remote-builder trust: stale host key + wrong sshKey path ...

variables.nix's nixCacheHostKey no longer matched nix-cache's actual SSH
host key (confirmed via ssh-keyscan against the live container), so every
declaratively-configured client's programs.ssh.knownHosts trusted the
wrong key -- distributed builds would fail host-key verification. Also,
modules/nix-cache/remote-builder-client.nix hardcoded sshKey to
/root/.ssh/nixremote, but the `server` host only has its own default
/root/.ssh/id_ed25519 installed (confirmed live via qm guest-agent) --
that file was never even present, so the build machine config pointed at
nothing. Standardize on each client's own default identity, matching the
per-host-key pattern vars.remoteBuilderAuthorizedKeys already uses instead
of a shared/differently-named keypair, and add
scripts/secrets/sync-nix-cache-host-key.sh (wired into
codex-maintenance.sh's --check) so the host-key drift doesn't silently
recur next time nix-cache is rebuilt or recreated.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V7yVH71vGrDVzovh9UaMu8

2026-07-20 17:21:12 +00:00

..

auto-installer.md

Reorganize scripts/ into secrets/, proxmox/, and lib/ subfolders

2026-07-20 16:20:45 +00:00

flake-lock-automation.md

Refactor flake targets into platform x build-type matrix

2026-07-19 12:03:33 +10:00

nix-cache.md

Fix nix-cache remote-builder trust: stale host key + wrong sshKey path

2026-07-20 17:21:12 +00:00

proxmox-images.md

Reorganize scripts/ into secrets/, proxmox/, and lib/ subfolders

2026-07-20 16:20:45 +00:00

pxe-boot.md

Consolidate CI on codex-maintenance.sh; clean up dead scripts and docs

2026-07-20 07:02:23 +10:00