From mboxrd@z Thu Jan 1 00:00:00 1970 From: Chris Marusich Subject: Re: AWS + OpenStack support Date: Thu, 13 Apr 2017 08:02:21 -0700 Message-ID: <87mvbkqrk2.fsf@gmail.com> References: <87lgr8hv48.fsf@ofosos.org> <87efwwpe21.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:44598) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cygGS-0005uO-Pu for guix-devel@gnu.org; Thu, 13 Apr 2017 11:02:29 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cygGR-0003px-Rk for guix-devel@gnu.org; Thu, 13 Apr 2017 11:02:28 -0400 In-Reply-To: <87efwwpe21.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Thu, 13 Apr 2017 16:39:18 +0200") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel , Mark Meyer --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable ludo@gnu.org (Ludovic Court=C3=A8s) writes: > Heya, > > Mark Meyer skribis: > >> So I'd like to extend Shepherd with a first-boot service that runs `guix >> system reconfigure'. And as a second step I want to include a Guile >> package that queries the metadata server. You should be able to do >> something like >> >> (user "guix-sd" >> (public-keys (metadata-get-keys))) > > For this part, you can look at how we register SSH public keys (for lshd > though, not sshd) in this module: > > https://git.savannah.gnu.org/cgit/guix/maintenance.git/tree/hydra/modul= es/sysadmin/people.scm > > I=E2=80=99d like to take this functionality in GuixSD proper and also add= it for > sshd. I'm not Mark, but I have a question. When you say "this functionality", which of the following do you mean? * A first-boot service that runs 'guix system reconfigure'. * A Guile module to facilitate querying the EC2 metadata server - this would provide the metadata-get-keys procedure as shown above. * The ability to register a user's SSH public keys by declaring them in the operating system configuration file, as shown above. =2D-=20 Chris --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEy/WXVcvn5+/vGD+x3UCaFdgiRp0FAljvkv0ACgkQ3UCaFdgi Rp0bjRAAvUICz7+8itJH1XfYX8mVKZ8aIVLU4ABMmlxbT2i84wnXq82bT3e1rsQz l01oK75CaqWDDb2dBwQiB1Hy7U4avkftL3Ym9ad5Q1qnImxI4V/9Pm3MKg9tV7wL cBn64zjnvSosGl9FSGgVB3arBa82rmZyEc/qGiYiNcV3jy1HdcZHXxvWzO84OT3e B6SOE3U9NfNe29XpMCKjG4YiKFLdajvKDjsv8sRP/49NGIVc46724Ym+vRIsLWLB 4AFIr85h453U1Uiv53nhvS8scyOiBFTXO8e9IwA4v+EWtk6HVEH3IRZ5cFUbxBc0 82qhQaPelCS0pmzvRfNEltoa//gYyVvmln/6/u+QFwQgL8YBpcf8Tfnhvv5VBlvu FNAbNPjanVAngvAGDlhVbbmOt/dB4nTvDsI59sWWt8IYr6Suri38S+d1romleZ74 1Vtd7rjCQQ6mvSLsczg4ehwjH6ivGcUUp5ADuIhUMUerp8Gl1D5GNg8vlI63pQKd h+Oqehn1wVrHs4m5wvuAfcjXbJ4HF3DvsLhEcvs5J8qsRZ0Cvmpdz5YEdWVHlXPV nmTsLH9mMx8UB6e+s8E0YHGysNnLEwXglVedjS9oTWT8DW1ZzqIWGG5W0Z/sh8bs Z8Vxbk3hbPjytFpPPNHDmUoq3CfxmmZx9k4xRu3q39HRuO6e9ZY= =TQfw -----END PGP SIGNATURE----- --=-=-=--