Commit b262f0d1cc6d

Vincent Demeester <vincent@sbr.pm>
2026-07-28 15:41:22
feat(kyushu): enable ssh-tpm-agent and ssh-agent
Added kyushu to hasTPMAgent, ssh-agent.enable, and openssh-askpass so it matches aomi's SSH setup for TPM + FIDO2 key support.
main
1 parent 4e31a75
Changed files (1)
home
common
shell
openssh.nix
home/common/shell/openssh.nix
@@ -13,7 +13,8 @@ let
   isAomi = hostname == "aomi";
   isAion = hostname == "aion";
   isOkinawa = hostname == "okinawa";
-  hasTPMAgent = isAomi || isOkinawa;
+  isKyushu = hostname == "kyushu";
+  hasTPMAgent = isAomi || isOkinawa || isKyushu;
 in
 {
   home.packages =
@@ -23,7 +24,7 @@ in
     ]
     # aomi is Fedora (no NixOS programs.ssh.startAgent); provide a GTK askpass
     # so FIDO2 sk-key PIN prompts work with the home-manager ssh-agent.
-    ++ lib.optionals isAomi [
+    ++ lib.optionals (isAomi || isKyushu) [
       openssh-askpass
     ]
     ++ lib.optionals hasTPMAgent [
@@ -32,7 +33,7 @@ in
 
   # aomi has no NixOS layer, so run a home-manager systemd user ssh-agent.
   # NixOS hosts (okinawa) use programs.ssh.startAgent instead.
-  services.ssh-agent.enable = isAomi;
+  services.ssh-agent.enable = isAomi || isKyushu;
 
   # aomi: ssh-tpm-agent is the *front* agent. It serves the machine-bound TPM
   # SSH key and proxies (-A) the FIDO2 ssh-agent above for fallback, so a single