01/02: hydra: berlin: Add "hydra" user to Childhurd.

[Jan Nieuwenhuizen]

janneke pushed a commit to branch master
in repository maintenance.

commit c102b5ac72a1022f78b3921dbe74da0b2b79721f
Author: Jan (janneke) Nieuwenhuizen <janneke@gnu.org>
AuthorDate: Wed Sep 23 18:00:06 2020 +0200

    hydra: berlin: Add "hydra" user to Childhurd.
    
    This enables offloading as user "hydra" to the local childhurd.
    
    * hydra/berlin.scm (childhurd-os)[users]: Add "hydra" user.
    (services): Override openssh-service-type to set their SSH-key.
---
 hydra/berlin.scm | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/hydra/berlin.scm b/hydra/berlin.scm
index 6cb654b..1bfe3d3 100644
--- a/hydra/berlin.scm
+++ b/hydra/berlin.scm
@@ -6,7 +6,7 @@
              (guix git-download)
              (srfi srfi-1))
 (use-service-modules base databases dns monitoring networking admin shepherd
-                    mcron virtualization)
+                    mcron ssh virtualization)
 (use-package-modules admin certs emacs linux mail monitoring
                      ssh tls tor vim package-management
                      version-control
@@ -142,10 +142,23 @@ Happy hacking!\n"))
                (string-append "127.0.0.1 localhost " host-name "\n"
                               "::1       localhost " host-name "\n"
                               "141.80.167.131 ci.guix.gnu.org\n")))
+   (users (cons* (user-account
+                  (name "hydra")
+                  (group "users")
+                  (home-directory "/home/hydra")
+                  (comment "Hydra User -- for offloading"))
+                 %base-user-accounts))
    (services
     (cons* (service mcron-service-type
                    (mcron-configuration (jobs (list childhurd-gc-job))))
-          (operating-system-user-services %hurd-vm-operating-system)))))
+           (modify-services
+               (operating-system-user-services %hurd-vm-operating-system)
+             (openssh-service-type
+              config =>
+              (openssh-configuration
+               (inherit config)
+               (authorized-keys
+                `(("hydra" ,(local-file "keys/ssh/hydra.gnu.org.pub")))))))))))
 
 (define (childhurd-net-options id)
   "Expose SSH and VNC ports on 0.0.0.0; for first Childhurd VM those