From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: AWS + OpenStack support Date: Fri, 14 Apr 2017 14:39:18 +0200 Message-ID: <871ssvf9jd.fsf@gnu.org> References: <87lgr8hv48.fsf@ofosos.org> <87efwwpe21.fsf@gnu.org> <87mvbkqrk2.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:42424) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cz0VY-000159-Qs for guix-devel@gnu.org; Fri, 14 Apr 2017 08:39:26 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cz0VU-00084g-V2 for guix-devel@gnu.org; Fri, 14 Apr 2017 08:39:24 -0400 In-Reply-To: <87mvbkqrk2.fsf@gmail.com> (Chris Marusich's message of "Thu, 13 Apr 2017 08:02:21 -0700") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Chris Marusich Cc: guix-devel , Mark Meyer Chris Marusich skribis: > ludo@gnu.org (Ludovic Court=C3=A8s) writes: > >> Heya, >> >> Mark Meyer skribis: >> >>> So I'd like to extend Shepherd with a first-boot service that runs `guix >>> system reconfigure'. And as a second step I want to include a Guile >>> package that queries the metadata server. You should be able to do >>> something like >>> >>> (user "guix-sd" >>> (public-keys (metadata-get-keys))) >> >> For this part, you can look at how we register SSH public keys (for lshd >> though, not sshd) in this module: >> >> https://git.savannah.gnu.org/cgit/guix/maintenance.git/tree/hydra/modu= les/sysadmin/people.scm >> >> I=E2=80=99d like to take this functionality in GuixSD proper and also ad= d it for >> sshd. > > I'm not Mark, but I have a question. When you say "this functionality", > which of the following do you mean? > > * A first-boot service that runs 'guix system reconfigure'. > > * A Guile module to facilitate querying the EC2 metadata server - this > would provide the metadata-get-keys procedure as shown above. > > * The ability to register a user's SSH public keys by declaring them in > the operating system configuration file, as shown above. I was referring to the ability to register user SSH public keys. Sorry for the confusion! Ludo=E2=80=99.