test remote builds

system-config/configuration/homebox/default.nix

@@ -21,6 +21,21 @@
             systemd-boot.enable = true;
             efi.canTouchEfiVariables = true;
         };
+        binfmt.emulatedSystems = lib.mkIf config.sysconfig.remoteBuildHost [ "aarch64-linux" ];
+    };
+
+    nix.settings.trusted-users = lib.mkIf config.sysconfig.remoteBuildHost [ "remote-builder" ];
+
+    users.users."remote-builder" = lib.mkIf config.sysconfig.remoteBuildHost {
+        isNormalUser = true;
+        createHome = false;
+        /*openssh.authorizedKeys.keyFiles = [
+            config.sops.secrets."remoteBuildClientKeys/laptop".path
+        ];*/
+        openssh.authorizedKeys.keyFiles = (builtins.partition 
+            (x: (builtins.match "^remoteBuildClientKeys/.+" x) != null) 
+            (builtins.attrNames config.sops.secrets)
+        ).right;
     };
 
   hardware = {
@@ -102,7 +117,7 @@
     };
 
     sysconfig = {
-        #remoteBuildHost = true;
+        remoteBuildHost = true;
         host = "homebox";
         graphical = true;
         users = {