From 2e15d7ed3bc628bc24aa27ddb88e0c9c53c59875 Mon Sep 17 00:00:00 2001
From: Swarsel <leon.schwarzaeugl@gmail.com>
Date: Sat, 28 Dec 2024 13:36:29 +0100
Subject: [PATCH] fix: bootstrap: Wipe known hosts after in. install

---
 SwarselSystems.org   | 2 ++
 scripts/bootstrap.sh | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/SwarselSystems.org b/SwarselSystems.org
index 0c3c277..d768808 100644
--- a/SwarselSystems.org
+++ b/SwarselSystems.org
@@ -3079,6 +3079,7 @@ This program sets up a new NixOS host remotely. It also takes care of secret man
   sops updatekeys --yes --enable-local-keyservice "${git_root}"/secrets/*/secrets.yaml
   # --------------------------
   green "Making ssh_host_ed25519_key available to home-manager for user $target_user"
+  sed -i "/$target_hostname/d; /$target_destination/d" ~/.ssh/known_hosts
   $scp_cmd root@"$target_destination":/etc/ssh/ssh_host_ed25519_key root@"$target_destination":/home/"$target_user"/.ssh/ssh_host_ed25519_key
   $ssh_root_cmd "chown $target_user:users /home/swarsel/.ssh/ssh_host_ed25519_key"
   # __________________________
@@ -3104,6 +3105,7 @@ This program sets up a new NixOS host remotely. It also takes care of secret man
 
       if yes_or_no "Do you want to rebuild immediately?"; then
           green "Rebuilding nix-config on $target_hostname"
+          yellow "Reminder: The password is 'setup'"
           $ssh_root_cmd "mkdir -p /root/.local/share/nix/; printf '{\"extra-substituters\":{\"https://nix-community.cachix.org\":true,\"https://nix-community.cachix.org https://cache.ngi0.nixos.org/\":true},\"extra-trusted-public-keys\":{\"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=\":true,\"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs= cache.ngi0.nixos.org-1:KqH5CBLNSyX184S9BKZJo1LxrxJ9ltnY2uAs5c/f1MA=\":true}}' > /root/.local/share/nix/trusted-settings.json"
           $ssh_cmd -oForwardAgent=yes "cd .dotfiles && sudo nixos-rebuild --show-trace --flake .#$target_hostname switch"
       fi
diff --git a/scripts/bootstrap.sh b/scripts/bootstrap.sh
index 146bb51..bec1046 100644
--- a/scripts/bootstrap.sh
+++ b/scripts/bootstrap.sh
@@ -283,6 +283,7 @@ green "Updating all secrets files to reflect updates .sops.yaml"
 sops updatekeys --yes --enable-local-keyservice "${git_root}"/secrets/*/secrets.yaml
 # --------------------------
 green "Making ssh_host_ed25519_key available to home-manager for user $target_user"
+sed -i "/$target_hostname/d; /$target_destination/d" ~/.ssh/known_hosts
 $scp_cmd root@"$target_destination":/etc/ssh/ssh_host_ed25519_key root@"$target_destination":/home/"$target_user"/.ssh/ssh_host_ed25519_key
 $ssh_root_cmd "chown $target_user:users /home/swarsel/.ssh/ssh_host_ed25519_key"
 # __________________________
@@ -308,6 +309,7 @@ if yes_or_no "Do you want to copy your full nix-config and nix-secrets to $targe
 
     if yes_or_no "Do you want to rebuild immediately?"; then
         green "Rebuilding nix-config on $target_hostname"
+        yellow "Reminder: The password is 'setup'"
         $ssh_root_cmd "mkdir -p /root/.local/share/nix/; printf '{\"extra-substituters\":{\"https://nix-community.cachix.org\":true,\"https://nix-community.cachix.org https://cache.ngi0.nixos.org/\":true},\"extra-trusted-public-keys\":{\"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=\":true,\"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs= cache.ngi0.nixos.org-1:KqH5CBLNSyX184S9BKZJo1LxrxJ9ltnY2uAs5c/f1MA=\":true}}' > /root/.local/share/nix/trusted-settings.json"
         $ssh_cmd -oForwardAgent=yes "cd .dotfiles && sudo nixos-rebuild --show-trace --flake .#$target_hostname switch"
     fi