free target env of seal-off command

README

@@ -10,5 +10,7 @@ On target device:
 * Copy device database to ~/artiq
 * Set timezone and kb layout
 * Comment out openssh.authorizedKeys.keys
-* sudo seal-off
 * history clear
+
+On build device:
+* cat sealoff.sh | ssh rabi@artiq "sudo sh"

final/configuration.nix

@@ -1,14 +1,6 @@
 { config, pkgs, artiq, ... }:
 
-let
+{
-  sealOff = pkgs.writeShellScriptBin "seal-off"
-  ''
-  set -e
-  nixos-rebuild boot
-  nix-collect-garbage -d
-  '';
-
-in {
   imports =
     [
       ./hardware-configuration.nix
@@ -44,7 +36,6 @@ in {
 
   nixpkgs.config.allowUnfree = true;
   environment.systemPackages = with pkgs; [
-    sealOff
     wget
     vim
     gitAndTools.gitFull

sealoff.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+
+set -e
+nixos-rebuild boot
+nix-collect-garbage -d