Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

identityPaths being ignored when using home-manager module #267

Open
GideonWolfe opened this issue Jul 9, 2024 · 1 comment
Open

identityPaths being ignored when using home-manager module #267

GideonWolfe opened this issue Jul 9, 2024 · 1 comment

Comments

@GideonWolfe
Copy link

GideonWolfe commented Jul 9, 2024

I am importing the agenix module into my `home-manager config like so

      homeConfigurations = {
        gideon = home-manager.lib.homeManagerConfiguration {
          inherit pkgs;
          extraSpecialArgs = { inherit spicetify-nix; };
          modules = [
            stylix.homeManagerModules.stylix
            agenix.homeManagerModules.default
            nixvim.homeManagerModules.nixvim
            ./configs/users/gideon/home.nix
          ];
        };
      };
    };

And then in my home.nix, I am importing secret_defs.nix, which defines the identityPaths to ssh private keys I know exist.

I have the RULES variable set set so agenix should be looking at the correct config that defines the users/systems.

When I pass the keys in through --identity, I am able to decrypt the secret.

Trying to decrypt with the -v option does not suggest that the path I configured has even been searched.

It may be ignoring this config as a whole, since the test1.path variable doesn't seem to be respected either, as it is not decrypted there.

What am I doing wrong here?

@jkerenyi
Copy link

Not sure if you've solved this for yourself yet, but I just discovered that running agenix in the terminal doesn't seem to pick up the config-defined value of identityPaths. Once I realized this, I tested various combinations of ed25519 keys in my config and everything decrypted correctly at runtime, even though they don't all decrypt with agenix. I figured I'd mention it in case it helps anyone coming across this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants