Post-Installation Setup

Exit VMWare Remote Console, and SSH in with your user. Since the configuration has been applied, you will no longer be able to SSH in as root, and you must use your Andrew ID/Kerberos instead:

ssh -A andrewid@hostname.scottylabs.org

The -A flag is necessary for forwarding your local SSH keys to the remote server, which will be needed for Git operations. Alternatively, you can copy your local SSH public key to the server (one-time setup):

scp ~/.ssh/id_ed25519 andrewid@hostname:~/.ssh/

Once you’re in, run update once. Always make sure to use the update alias for sudo nixos-rebuild switch, since it creates a btrfs backup first. You can use rollback if something goes wrong.

Finally, add the VM’s SSH host key to secrets.nix so that agenix can encrypt secrets for this host:

cat /etc/ssh/ssh_host_ed25519_key.pub

Copy the output and add it to secrets.nix at the repo root:

let
  # ...
  hostname = "ssh-ed25519 AAAAC3...";  # paste here
in
{
  # ...
}

Commit this change to the repository. Finally, if this host will run services that use OpenBao secrets, follow the Setting Up a New Host instructions.