about summary refs log tree commit diff
path: root/nixos/modules/rename.nix
diff options
context:
space:
mode:
authorEelco Dolstra <eelco.dolstra@logicblox.com>2014-04-18 00:45:26 +0200
committerEelco Dolstra <eelco.dolstra@logicblox.com>2014-04-18 00:45:26 +0200
commitffedee6ed523864dd5f871ffd85e3c2099d579a2 (patch)
tree56f38409025243eaffb154c518f6b525945c7231 /nixos/modules/rename.nix
parente34a1589fe1e2cd37a4d47a0dbf6c5791719e0f1 (diff)
downloadnixlib-ffedee6ed523864dd5f871ffd85e3c2099d579a2.tar
nixlib-ffedee6ed523864dd5f871ffd85e3c2099d579a2.tar.gz
nixlib-ffedee6ed523864dd5f871ffd85e3c2099d579a2.tar.bz2
nixlib-ffedee6ed523864dd5f871ffd85e3c2099d579a2.tar.lz
nixlib-ffedee6ed523864dd5f871ffd85e3c2099d579a2.tar.xz
nixlib-ffedee6ed523864dd5f871ffd85e3c2099d579a2.tar.zst
nixlib-ffedee6ed523864dd5f871ffd85e3c2099d579a2.zip
Start ssh-agent as a user unit
This has some advantages:

* You get ssh-agent regardless of how you logged in. Previously it was
  only started for X11 sessions.

* All sessions of a user share the same agent. So if you added a key
  on tty1, it will also be available on tty2.

* Systemd will restart ssh-agent if it dies.

* $SSH_AUTH_SOCK now points to the /run/user/<uid> directory, which is
  more secure than /tmp.

For bonus points, we should patch ssh-agent to support socket-based
activation...
Diffstat (limited to 'nixos/modules/rename.nix')
-rw-r--r--nixos/modules/rename.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/nixos/modules/rename.nix b/nixos/modules/rename.nix
index aa3cefdcad14..1128b9c0da8d 100644
--- a/nixos/modules/rename.nix
+++ b/nixos/modules/rename.nix
@@ -103,6 +103,7 @@ in zipModules ([]
 ++ obsolete [ "services" "sshd" "gatewayPorts" ] [ "services" "openssh" "gatewayPorts" ]
 ++ obsolete [ "services" "sshd" "permitRootLogin" ] [ "services" "openssh" "permitRootLogin" ]
 ++ obsolete [ "services" "xserver" "startSSHAgent" ] [ "services" "xserver" "startOpenSSHAgent" ]
+++ obsolete [ "services" "xserver" "startOpenSSHAgent" ] [ "programs" "ssh" "startAgent" ]
 ++ obsolete [ "services" "xserver" "windowManager" "xbmc" ] [ "services" "xserver" "desktopManager" "xbmc" ]
 
 # KDE