Revert "Make /run/keys a ramfs so it can't be swapped out"

Now part of nixpkgs This reverts commit b9f01e1. Signed-off-by: Shea Levy <[email protected]>
aaronchall · Feb 5, 2014 · b60dda3 · b60dda3
1 parent b9f01e1
commit b60dda3
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/nix/keys.nix b/nix/keys.nix
@@ -45,13 +45,10 @@ with pkgs.lib;
 
   config = {
 
-    boot.postBootCommands = ''
-      mkdir -p /run/keys -m 0700
-      mount -t ramfs none /run/keys
-    '';
-
     system.activationScripts.nixops-keys =
       ''
+        mkdir -p /run/keys -m 0700
+
         ${optionalString config.deployment.storeKeysOnMachine
             (concatStrings (mapAttrsToList (name: value:
               let