about summary refs log tree commit diff
path: root/ops/terraform/deploy-nixos/nixos-copy.sh
blob: 1c6b8df024d240b4f1ee104a6b8d8fbd5b6c332b (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
#!/usr/bin/env bash
#
# Copies a NixOS system to a target host, using the provided key.
set -ueo pipefail

scratch="$(mktemp -d)"
trap 'rm -rf -- "${scratch}"' EXIT

echo -n "$DEPLOY_KEY" > $scratch/id_deploy
chmod 0600 $scratch/id_deploy

export NIX_SSHOPTS="\
    -o StrictHostKeyChecking=no\
    -o UserKnownHostsFile=/dev/null\
    -o GlobalKnownHostsFile=/dev/null\
    -o IdentityFile=$scratch/id_deploy"

nix-copy-closure \
  --to ${TARGET_USER}@${TARGET_ADDRESS} \
  ${SYSTEM_DRV} \
  --gzip \
  --include-outputs \
  --use-substitutes