feat: upgrade ekman to new cluster structure

ekman/default.nix

@@ -96,7 +96,7 @@ let
       };
       cachix.enable = false;
       monitoring.nodeExporter.enable = false;
-      hpc.mft.enable = false; # Mellanox MFT
+      mft.enable = false; # Mellanox MFT
     };
 
     networking = {
@@ -250,7 +250,7 @@ let
         hostNames = [
           "ekman" "ekman.cluster.local" "ekman.oceanbox.io" "10.255.241.100" "10.255.243.100"
         ];
-        publicKeyFile = ./logon/ssh_host_key.pub;
+        publicKeyFile = ./login/ssh_host_key.pub;
       };
       fs-work = {
         hostNames = [
@@ -293,6 +293,18 @@ let
             permissions = "u+rs,g+rx,o+rx";
         };
     };
+
+    # Use nvd to get package diff before apply
+    system.activationScripts.system-diff = {
+     supportsDryActivation = true; # safe: only outputs to stdout
+     text = ''
+       export PATH="${pkgs.lib.makeBinPath [ pkgs.nixVersions.latest ]}:$PATH"
+       if [ -e /run/current-system ]; then
+         ${pkgs.lib.getExe pkgs.nvd} diff '/run/current-system' "$systemConfig" || true
+       fi
+     '';
+    };
+
   };
 
   openssh-shosts = pkgs.openssh.overrideAttrs (attrs: {