1
0

pkgs/nixfiles: update ssh host keys only if they are not empty

This commit is contained in:
clerie 2023-10-20 22:14:00 +02:00
parent 4f467299d1
commit 30cc2e4f15

View File

@ -4,5 +4,9 @@ cd "$(git rev-parse --show-toplevel)"
for host in $(nix eval --apply 'attrs: builtins.concatStringsSep "\n" (builtins.filter (name: (builtins.substring 0 1 name) != "_") (builtins.attrNames attrs))' --raw .#clerie.hosts); do for host in $(nix eval --apply 'attrs: builtins.concatStringsSep "\n" (builtins.filter (name: (builtins.substring 0 1 name) != "_") (builtins.attrNames attrs))' --raw .#clerie.hosts); do
echo "$host" echo "$host"
ssh-keyscan -t ed25519 "${host}.net.clerie.de" 2>/dev/null | sed -E 's/(\S+) (.+)/\2/g' > "hosts/${host}/ssh.pub" ssh_key=$(ssh-keyscan -t ed25519 "${host}.net.clerie.de" 2>/dev/null | sed -E 's/(\S+) (.+)/\2/g' || true)
if [[ -n "$ssh_key" ]]; then
echo "$ssh_key"
echo "$ssh_key" > "hosts/${host}/ssh.pub"
fi
done done