add support for offloading from other computers

.gitignore

@@ -7,7 +7,6 @@ dbus-1
 environment
 fstab
 group
-guix/
 hostname
 hosts
 issue
@@ -44,3 +43,9 @@ sysconfig/
 syslog.conf
 timezone
 udev
+*.sec
+ssh/ssh_host_*_key
+ssh/authorized_keys.d/
+guix/acl*
+bluetooth
+shadow*

config.scm

@@ -347,6 +347,11 @@ fi"))
   ;; La liste des comptes utilisateurs (« root » est implicite).
   (users
     (cons*
+      (user-account
+        (name "offload")
+        (comment "guix offload account")
+        (group "users")
+        (system? #t))
       (user-account
         (name "neox")
         (comment "neox")
@@ -601,9 +606,12 @@ fi"))
           ;; Service OpenSSH
           (service openssh-service-type
             (openssh-configuration
-               (x11-forwarding? #t)
-               (password-authentication? #f)
-               (permit-root-login 'prohibit-password)))
+              (authorized-keys
+                `(("neox" ,(local-file "/etc/ssh/ssh_neox_ed25519_key.pub"))
+                  ("offload" ,(local-file "/etc/ssh/ssh_n-t400s_ed25519_key.pub"))))
+              (x11-forwarding? #t)
+              (password-authentication? #f)
+              (permit-root-login 'prohibit-password)))
           ;; Service Tor
           (service tor-service-type)
        
@@ -652,6 +660,17 @@ fi"))
           (handle-lid-switch 'ignore)
           (handle-lid-switch-external-power 'ignore)))
 
+        ;; Configuration du service Guix
+        (guix-service-type config => (guix-configuration
+          (inherit config)
+          (authorize-key? #t)
+          (authorized-keys
+            (append
+              (list
+                (local-file "/etc/guix/n-t400s.pub"))
+              %default-authorized-guix-keys))
+          (extra-options '("--gc-keep-derivations=yes" "--gc-keep-output=yes"))))
+
         ;; Configuration du service network-manager pour prendre en charge
         ;; OpenVPN
         (network-manager-service-type config => (network-manager-configuration 

guix/n-t400s.pub

@@ -0,0 +1,4 @@
+(public-key 
+  (ecc 
+   (curve Ed25519)
+   (q #7F8EB1AE40F138A9DF5F61C57CC4E33F4F1E42244CE71D855806CDE06113A245#)))

guix/signing-key.pub

@@ -0,0 +1,6 @@
+(public-key 
+ (ecc 
+  (curve Ed25519)
+  (q #8E46170F0B43CC3C0AD67F162CB1707246D18F322C3EA040898FBB15F2A18963#)
+  )
+ )

ssh/ssh_n-t400s_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhNNT9tFGTTGQ9e+L5u1gJiPpiivE04r8iQ4zapXpSU root@(none)

ssh/ssh_neox_ed25519_key.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDZQd7U/DRPK5/qk35dzeG5dpnS/0FesbRrgZTSMHEsv openpgp:0x18D3885F