mysaa/nixos-config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Git now waits for /run/secrets/

Browse Source
This commit is contained in:
Samy Avrillon 2025-10-31 18:57:29 +01:00
parent 608cff7116
commit 72b8720bcc
3 changed files with 20 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
profiles/basic/default.nix
View File

@ -64,6 +64,7 @@
wget
git
tree
file
ripgrep
];

2
profiles/basic/git.nix
View File

@ -6,8 +6,6 @@
}:
{
home-manager.users.mysaa.programs.gpg.homedir = "/run/secrets/gpg/";
home-manager.users.mysaa.programs.git = {
enable = true;
userEmail = "mysaa@hadoly.fr";

23
profiles/basic/secrets.nix
View File

@ -4,11 +4,26 @@
pkgs,
...
}:
{
let
gpg-wrapper = pkgs.writeShellScriptBin "gpg" ''
until ${pkgs.coreutils}/bin/timeout 1 [ -d /run/secrets/gpg/ ]
do
echo "Waiting for '/run/secrets/' to be mounted" >&2
sleep 1
done
if [ -z "$GNUPGHOME" ]
then export GNUPGHOME="/run/secrets/gpg/"
fi
${pkgs.gnupg}/bin/gpg "$@"
'';
in {
home-manager.users.mysaa.home.packages = [
gpg-wrapper
];
home-manager.users.mysaa.programs.git.signing.signer = "${gpg-wrapper}/bin/gpg";
home-manager.users.mysaa.home.sessionVariables = {
GNUPGHOME = "/run/secrets/gpg/";
};
fileSystems."/run/secrets" = {
device = "/dev/disk/by-uuid/545bfd15-0973-4395-9d05-6c4c78a9e45c";
fsType = "ext4";