03/04: hydra: bayfront: Explicitly list authorized keys.

[Ludovic Courtès]

civodul pushed a commit to branch master
in repository maintenance.

commit 41574e418ad38648d651bcffe8e4a0a045454b5c
Author: Ludovic Courtès <ludo@gnu.org>
AuthorDate: Fri Nov 20 18:30:47 2020 +0100

    hydra: bayfront: Explicitly list authorized keys.
    
    * hydra/bayfront.scm (%build-node-keys): New variables.
    (services): Pass #:authorized-keys to 'frontend-services'.
---
 hydra/bayfront.scm | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/hydra/bayfront.scm b/hydra/bayfront.scm
index 6a7192d..6f291dc 100644
--- a/hydra/bayfront.scm
+++ b/hydra/bayfront.scm
@@ -140,6 +140,12 @@ Happy hacking!\n"))
   ;; IPv4 address of "ns1.gnu.org".
   "209.51.188.164")
 
+(define %build-node-keys
+  ;; Signing keys of the build nodes.
+  (list (local-file "keys/guix/harbourfront.guix.info-export.pub")
+        (local-file "keys/guix/milano-guix-1.di.unimi.it-export.pub")))
+
+
 (operating-system
   (host-name "bayfront")
   (timezone "Europe/Paris")
@@ -252,6 +258,7 @@ Happy hacking!\n"))
 
                    (modify-services
                        (frontend-services %sysadmins
+                                          #:authorized-keys %build-node-keys
                                           #:nar-ttl (* 7 24 3600)
                                           #:motd %motd
                                           #:max-jobs 4