diff options
| author | Cole Mickens <cole.mickens@gmail.com> | 2020-03-27 23:42:32 +0000 |
|---|---|---|
| committer | Jon <jonringer@users.noreply.github.com> | 2020-03-29 13:56:55 -0700 |
| commit | 1992768157d7456748ec28e01c8952cf09b53fbf (patch) | |
| tree | 736f366be3d5a66e36175717e36618752932e696 /nixos/maintainers | |
| parent | 627ae7e0570cec26e6fd54e2b499cab81e5ea884 (diff) | |
nixos/azure: clarify how users work in basic example
Diffstat (limited to 'nixos/maintainers')
| -rw-r--r-- | nixos/maintainers/scripts/azure-new/README.md | 7 | ||||
| -rw-r--r-- | nixos/maintainers/scripts/azure-new/examples/basic/system.nix | 3 |
2 files changed, 10 insertions, 0 deletions
diff --git a/nixos/maintainers/scripts/azure-new/README.md b/nixos/maintainers/scripts/azure-new/README.md index ee1fc682534c..20e81c44ce5d 100644 --- a/nixos/maintainers/scripts/azure-new/README.md +++ b/nixos/maintainers/scripts/azure-new/README.md @@ -33,3 +33,10 @@ img="/subscriptions/.../..." # use output from last command ... => booted ``` + +## Future Work + +1. If the user specifies a hard-coded user, then the agent could be removed. + Probably has security benefits; definitely has closure-size benefits. + (It's likely the VM will need to be booted with a special flag. See: + https://github.com/Azure/azure-cli/issues/12775 for details.) diff --git a/nixos/maintainers/scripts/azure-new/examples/basic/system.nix b/nixos/maintainers/scripts/azure-new/examples/basic/system.nix index 5f98216d183d..855bd3bab719 100644 --- a/nixos/maintainers/scripts/azure-new/examples/basic/system.nix +++ b/nixos/maintainers/scripts/azure-new/examples/basic/system.nix @@ -8,6 +8,9 @@ in "${modulesPath}/virtualisation/azure-image.nix" ]; + ## NOTE: This is just an example of how to hard-code a user. + ## The normal Azure agent IS included and DOES provision a user based + ## on the information passed at VM creation time. users.users."${username}" = { isNormalUser = true; home = "/home/${username}"; |