@@ -65,7 +65,7 @@ mkdir -p "$sshKeyDir"
65
65
declare -A diskEncryptionKeys=()
66
66
declare -A extraFilesOwnership=()
67
67
declare -a nixCopyOptions=()
68
- declare -a sshArgs=()
68
+ declare -a sshArgs=(" -i " " $sshKeyDir /nixos-anywhere " " -o " " UserKnownHostsFile=/dev/null " " -o " " StrictHostKeyChecking=no " )
69
69
70
70
showUsage () {
71
71
cat << USAGE
@@ -407,23 +407,27 @@ parseArgs() {
407
407
408
408
# ssh wrapper
409
409
runSshNoTty () {
410
- ssh -i " $sshKeyDir " /nixos-anywhere -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no " ${sshArgs[@]} " " $sshConnection " " $@ "
410
+ # shellcheck disable=SC2029
411
+ # We want to expand "$@" to get the command to run over SSH
412
+ ssh " ${sshArgs[@]} " " $sshConnection " " $@ "
411
413
}
412
414
runSshTimeout () {
413
- timeout 10 ssh -i " $sshKeyDir " /nixos-anywhere -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no " ${sshArgs[@]} " " $sshConnection " " $@ "
415
+ timeout 10 ssh " ${sshArgs[@]} " " $sshConnection " " $@ "
414
416
}
415
417
runSsh () {
416
- ssh " $sshTtyParam " -i " $sshKeyDir " /nixos-anywhere -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no " ${sshArgs[@]} " " $sshConnection " " $@ "
418
+ # shellcheck disable=SC2029
419
+ # We want to expand "$@" to get the command to run over SSH
420
+ ssh " $sshTtyParam " " ${sshArgs[@]} " " $sshConnection " " $@ "
417
421
}
418
422
419
423
nixCopy () {
420
- NIX_SSHOPTS=" -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i $sshKeyDir /nixos-anywhere ${sshArgs[*]} " nix copy \
424
+ NIX_SSHOPTS=" ${sshArgs[*]} " nix copy \
421
425
" ${nixOptions[@]} " \
422
426
" ${nixCopyOptions[@]} " \
423
427
" $@ "
424
428
}
425
429
nixBuild () {
426
- NIX_SSHOPTS=" -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i $sshKeyDir /nixos-anywhere ${sshArgs[*]} " nix build \
430
+ NIX_SSHOPTS=" ${sshArgs[*]} " nix build \
427
431
--print-out-paths \
428
432
--no-link \
429
433
" ${nixBuildFlags[@]} " \
@@ -481,20 +485,14 @@ uploadSshKey() {
481
485
if [[ ${envPassword} == y ]]; then
482
486
sshpass -e \
483
487
ssh-copy-id \
484
- -i " $sshKeyDir " /nixos-anywhere.pub \
485
488
-o ConnectTimeout=10 \
486
- -o UserKnownHostsFile=/dev/null \
487
489
-o IdentitiesOnly=yes \
488
- -o StrictHostKeyChecking=no \
489
490
" ${sshCopyIdArgs[@]} " \
490
491
" ${sshArgs[@]} " \
491
492
" $sshConnection "
492
493
else
493
494
ssh-copy-id \
494
- -i " $sshKeyDir " /nixos-anywhere.pub \
495
495
-o ConnectTimeout=10 \
496
- -o UserKnownHostsFile=/dev/null \
497
- -o StrictHostKeyChecking=no \
498
496
" ${sshCopyIdArgs[@]} " \
499
497
" ${sshArgs[@]} " \
500
498
" $sshConnection "
0 commit comments