NixOS SSH Key Leak Exposes macOS Linux Builders

NixOS disclosed on 6 November that darwin.linux-builder writes its own SSH private key into the world-readable Nix store, where any local account can read it, and that the QEMU builder forwards port 31022 to every network the Mac joins. Both fixes are merged, but updating does not rotate a key already copied out. Weiterlesen: NixOS SSH Key Leak Exposes macOS Linux Builders