Remove CVE-2024-6387 ssh workaround

.github/workflows/ci.yml

@@ -10,14 +10,6 @@ jobs:
   build:
     runs-on: nix
     steps:
-      - name: Debug
-        run: |
-          cat /etc/hosts
-          nix run nixpkgs#curl -- -v https://heise.de
-          nix run nixpkgs#curl -- -v https://fh2.ch
-          nix run nixpkgs#curl -- -v https://git.qo.is
-          git clone https://git.qo.is/qo.is/infrastructure-private.git /tmp/private
-
       - name: Initialize CI
         uses: https://git.qo.is/qo.is/actions-nix-init@main
         with:
@@ -26,10 +18,6 @@ jobs:
 
       - name: Add submodules to nix store to circumvent another nix bug
         run: |
-          cat /etc/hosts
-          curl -v https://heise.de
-          curl -v https://fh2.ch
-          curl -v https://git.qo.is
           git clone https://git.qo.is/qo.is/infrastructure-private.git /tmp/private
           cd /tmp/private
           nix flake prefetch

nixos-configurations/stompert/default.nix

@@ -11,7 +11,8 @@
     ../../defaults/meta
   ];
 
-  boot.initrd.luks.devices."systems".device = "/dev/disk/by-uuid/5718bd19-cb7a-4728-9ec4-6b2be48215fc";
+  boot.initrd.luks.devices."systems".device =
+    "/dev/disk/by-uuid/5718bd19-cb7a-4728-9ec4-6b2be48215fc";
 
   fileSystems."/" = {
     device = "/dev/mapper/vg_systems-hv_stompert";

nixos-modules/qois/git-ci-runner/default.nix

@@ -110,8 +110,6 @@ with lib;
           rpc:       files
           NSSWITCH
 
-          cp -f ${config.environment.etc.hosts.source} hosts
-
           # list the content as it will be imported into the container
           tar -cv . | tar -tvf -
           tar -cv . | podman import - gitea-runner-nix