diff options
| author |  Tom van der Lee <tom@vanderlee.io> | 2026-09-18 15:14:46 +0200 |
|---|---|---|
| committer | Tom van der Lee <tom@vanderlee.io> | 2026-09-18 15:14:46 +0200 |
| commit | 179ae2d78e39970ae55955f1a7a56a6b9671eb3d (patch) | |
| tree | fbf324bff764479c681e39c458940abbedc1173f /openspec/changes/fix-ssh-authorized-keys-spec/tasks.md | |
| parent | 4937d0d6f29895b514dcf8cd20c73a1aec446144 (diff) | |
| download | desktop-flake-179ae2d78e39970ae55955f1a7a56a6b9671eb3d.tar.gz desktop-flake-179ae2d78e39970ae55955f1a7a56a6b9671eb3d.tar.bz2 desktop-flake-179ae2d78e39970ae55955f1a7a56a6b9671eb3d.zip | |
Propose fixing the SSH authorized-key spec drift
Planning artifacts only. The developer-environment capability's SSH
requirement never stated that an authorized key must be provisioned --
the real gap that locked out the floep host after its first rebuild.
The code fix already shipped; this change brings the spec in line
with it. design.md skipped (none of its trigger conditions apply to a
documentation-only correction).
Diffstat (limited to 'openspec/changes/fix-ssh-authorized-keys-spec/tasks.md')
| -rw-r--r-- | openspec/changes/fix-ssh-authorized-keys-spec/tasks.md | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/openspec/changes/fix-ssh-authorized-keys-spec/tasks.md b/openspec/changes/fix-ssh-authorized-keys-spec/tasks.md new file mode 100644 index 0000000..24b7528 --- /dev/null +++ b/openspec/changes/fix-ssh-authorized-keys-spec/tasks.md | |||
| @@ -0,0 +1,7 @@ | |||
| 1 | ## 1. Verify implementation already matches the updated spec | ||
| 2 | |||
| 3 | - [ ] 1.1 Confirm `modules/nixos/common.nix` declares `users.users.tom.openssh.authorizedKeys.keys` with at least one key — verify by reading the file (no code change expected; this task is a sanity check, not an implementation step) | ||
| 4 | |||
| 5 | ## 2. Sync | ||
| 6 | |||
| 7 | - [ ] 2.1 Archive this change and sync the `MODIFIED` requirement into `openspec/specs/developer-environment/spec.md` — verify the main spec's "SSH access is enabled by default on NixOS hosts" requirement includes the authorized-key sentence and the new "An authorized key is provisioned" scenario after archiving | ||