Open
Description
So when I use deploy-rs, I get the following warning:
π βΉοΈ [deploy] [INFO] Evaluating flake in .
π β οΈ [deploy] [WARN] Interactive sudo is enabled! Using a sudo password is less secure than correctly configured SSH keys.
Please use keys in production environments.
π βΉοΈ [deploy] [INFO] You will now be prompted for the sudo password for redacted.com.
I do use ssh keys to authenticate to the server with a plain user. I have root ssh access disabled for security reasons. And I dont want my plain user to run passwordless sudo commands so I need the password to run the nixos-rebuild switch
.
I feel the warning is targeted at users using password-based ssh ? which is not my case but I still get the warning.
Also the password is asked right at the start of deploy-rs, I would prefer for it to be asked last second, right before doing the switch to avoid the process holding onto it.
Metadata
Assignees
Labels
No labels