diff options
author | Joachim Fasting <joachifm@fastmail.fm> | 2016-10-24 20:33:34 +0200 |
---|---|---|
committer | Joachim Fasting <joachifm@fastmail.fm> | 2016-10-27 14:15:53 +0200 |
commit | 9654e09b5a4bd44ecf16f8c435afa834a76ef2b1 (patch) | |
tree | d90caa18635bd9b0336ffe337ad148f1610007e3 /nixos/modules/services | |
parent | e94bd6f31dc6b551b28b479a992564d837e28b95 (diff) | |
download | nixlib-9654e09b5a4bd44ecf16f8c435afa834a76ef2b1.tar nixlib-9654e09b5a4bd44ecf16f8c435afa834a76ef2b1.tar.gz nixlib-9654e09b5a4bd44ecf16f8c435afa834a76ef2b1.tar.bz2 nixlib-9654e09b5a4bd44ecf16f8c435afa834a76ef2b1.tar.lz nixlib-9654e09b5a4bd44ecf16f8c435afa834a76ef2b1.tar.xz nixlib-9654e09b5a4bd44ecf16f8c435afa834a76ef2b1.tar.zst nixlib-9654e09b5a4bd44ecf16f8c435afa834a76ef2b1.zip |
cjdns service: ensure that generated passwd has requested length
`head -cNUM ... | tr -dc SET` might generate output containing fewer than NUM characters. Given the limited alphabet, this could result in a fairly weak passphrase. The construction `tr </dev/urandom | head -cNUM`, however, is sure to give us the full `NUM`.
Diffstat (limited to 'nixos/modules/services')
-rw-r--r-- | nixos/modules/services/networking/cjdns.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/networking/cjdns.nix b/nixos/modules/services/networking/cjdns.nix index 64d9ec215e40..849d273a41d3 100644 --- a/nixos/modules/services/networking/cjdns.nix +++ b/nixos/modules/services/networking/cjdns.nix @@ -229,7 +229,7 @@ in fi if [ -z "$CJDNS_ADMIN_PASSWORD" ]; then - echo "CJDNS_ADMIN_PASSWORD=$(${pkgs.coreutils}/bin/head -c 96 /dev/urandom | ${pkgs.coreutils}/bin/tr -dc A-Za-z0-9)" \ + echo "CJDNS_ADMIN_PASSWORD=$(tr -dc A-Za-z0-9 </dev/urandom | head -c 96)" \ >> /etc/cjdns.keys fi ''; |