desktop: Refactor guix signing keys into files; add genenetwork

* .guix/rekahsoft/guix-config/desktop.scm: Use local-file's for guix signing keys
* .pubkeys/guix/cuirass-genenetwork-org.pub: (new) guix signing key
* .pubkeys/guix/cuirass-nonguix-org.pub: guix signing key (previous in source)
* .pubkeys/guix/guix-ci-home-rekahsoft-ca.pub: guix signing key (previous in source)
* .pubkeys/ssh/*.pub: Moved from .pubkeys/*.pub
This commit is contained in:
Collin J. Doering 2024-09-27 16:46:41 -04:00
parent 1cc6f36432
commit 42d0c61105
Signed by: rekahsoft
GPG Key ID: F77E319397CDA716
7 changed files with 32 additions and 23 deletions

View File

@ -21,10 +21,16 @@
%rkd-desktop-kernel-arguments
rkd-desktop))
(define %guix-signing-keys
(list
(local-file "../../../.pubkeys/guix/cuirass-genenetwork-org.pub")
(local-file "../../../.pubkeys/guix/cuirass-nonguix-org.pub")
(local-file "../../../.pubkeys/guix/guix-ci-home-rekahsoft-ca.pub")))
;; Keys used for ssh access
(define collin-ed25519-key (local-file "../../../.pubkeys/ed25519-861CD08E.pub"))
(define collin-rsa4096-key (local-file "../../../.pubkeys/rsa4096-6765FB18.pub"))
(define collin-rsa-key (local-file "../../../.pubkeys/rsa2048-ED51AB07.pub"))
(define collin-ed25519-key (local-file "../../../.pubkeys/ssh/ed25519-861CD08E.pub"))
(define collin-rsa4096-key (local-file "../../../.pubkeys/ssh/rsa4096-6765FB18.pub"))
(define collin-rsa-key (local-file "../../../.pubkeys/ssh/rsa2048-ED51AB07.pub"))
(define %rkd-desktop-services
(append
@ -77,26 +83,11 @@
(guix-service-type config =>
(guix-configuration
(inherit config)
(substitute-urls
(append (list "https://substitutes.nonguix.org"
(authorized-keys (append %guix-signing-keys %default-authorized-guix-keys))
(substitute-urls (append (list "https://cuirass.genenetwork.org"
"https://substitutes.nonguix.org"
"https://guix-ci.home.rekahsoft.ca")
%default-substitute-urls))
(authorized-keys
(append (list (plain-file "non-guix.pub"
"(public-key
(ecc
(curve Ed25519)
(q #C1FD53E5D4CE971933EC50C9F307AE2171A2D3B52C804642A7A35F84F3A4EA98#)
)
)")
(plain-file "rekahsoft-guix.pub"
"(public-key
(ecc
(curve Ed25519)
(q #13EBA5788C96A57B32273782E8CB24834338B7DC00D7C0F103CA2C5576409A78#)
)
)"))
%default-authorized-guix-keys)))))))
%default-substitute-urls)))))))
(define %rkd-desktop-kernel-arguments
(cons* "resume=/dev/mapper/vg0-swap"

View File

@ -0,0 +1,6 @@
(public-key
(ecc
(curve Ed25519)
(q #9578AD6CDB23BA51F9C4185D5D5A32A7EEB47ACDD55F1CCB8CEE4E0570FBF961#)
)
)

View File

@ -0,0 +1,6 @@
(public-key
(ecc
(curve Ed25519)
(q #C1FD53E5D4CE971933EC50C9F307AE2171A2D3B52C804642A7A35F84F3A4EA98#)
)
)

View File

@ -0,0 +1,6 @@
(public-key
(ecc
(curve Ed25519)
(q #13EBA5788C96A57B32273782E8CB24834338B7DC00D7C0F103CA2C5576409A78#)
)
)