This commit is contained in:
2023-02-23 23:41:30 +00:00
parent b6808dc418
commit 1514034f5b

View File

@@ -1,19 +1,19 @@
# vmimages
based on https://samleathers.com/posts/2022-02-11-my-new-network-and-sops.html
Create new SSH HOST KEYS
## Create new SSH HOST KEYS
sudo ssh-keygen -q -N "" -t rsa -b 4096 -f /etc/ssh/ssh_host_rsa_key
sudo ssh-keygen -q -N "" -t ed25519 -f /etc/ssh/ssh_host_ed25519_key
Local
nix-shell -p ssh-to-age --run 'cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age'
## Local
`nix-shell -p ssh-to-age --run 'cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age'`
or in nix develop
`cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age'`
## Add key to .sops.yaml
## rekey a file
`sops updatekeys hosts/wsl2/secrets.yaml`
TODO
swtich to ed25519
ssh-to-age? https://github.com/Mic92/ssh-to-age