Luke Granger-Brown
57725ef3ec
git-subtree-dir: third_party/nixpkgs git-subtree-split: 76612b17c0ce71689921ca12d9ffdc9c23ce40b2
31 lines
844 B
Nix
31 lines
844 B
Nix
{ lib, modulesPath, pkgs, ... }:
|
|
let
|
|
ssh-keys =
|
|
if builtins.pathExists ../../ssh-keys.nix
|
|
then # Outside sandbox
|
|
../../ssh-keys.nix
|
|
else # In sandbox
|
|
./ssh-keys.nix;
|
|
|
|
inherit (import ssh-keys pkgs)
|
|
snakeOilPrivateKey snakeOilPublicKey;
|
|
in
|
|
{
|
|
imports = [
|
|
(modulesPath + "/virtualisation/qemu-vm.nix")
|
|
(modulesPath + "/testing/test-instrumentation.nix")
|
|
];
|
|
virtualisation.writableStore = true;
|
|
nix.settings.substituters = lib.mkForce [ ];
|
|
virtualisation.graphics = false;
|
|
documentation.enable = false;
|
|
services.qemuGuest.enable = true;
|
|
boot.loader.grub.enable = false;
|
|
|
|
services.openssh.enable = true;
|
|
users.users.root.openssh.authorizedKeys.keys = [
|
|
snakeOilPublicKey
|
|
];
|
|
security.pam.services.sshd.limits =
|
|
[{ domain = "*"; item = "memlock"; type = "-"; value = 1024; }];
|
|
}
|