Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-02-08 11:05:31 -05:00
Code Issues Packages Projects Releases Wiki Activity

ssh node image configuration

Browse Source
This commit is contained in:
miampf 2024-12-10 12:37:39 +01:00
parent c25d0c34dd
commit a37ecfa9b7
No known key found for this signature in database
GPG Key ID: EF039364B5B6886C
6 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
image/base/mkosi.conf
View File

@ -41,7 +41,6 @@ Packages=containerd
# Network # Network
Packages=iproute Packages=iproute
dbus dbus
openssh
openssh-server openssh-server
systemd-networkd systemd-networkd
systemd-resolved systemd-resolved

1
image/base/mkosi.skeleton/usr/lib/systemd/system-preset/30-constellation.preset
View File

@ -10,3 +10,4 @@ enable measurements.service
enable export_constellation_debug.service enable export_constellation_debug.service
enable systemd-timesyncd enable systemd-timesyncd
enable udev-trigger.service enable udev-trigger.service
enable create-host-ssh-key.service

4
image/base/mkosi.skeleton/usr/lib/systemd/system/create-host-ssh-key.service
View File

@ -1,10 +1,10 @@
[Unit] [Unit]
Description=Create a host SSH key Description=Create a host SSH key
Before=network-pre.target Before=sshd.service
[Service] [Service]
Type=oneshot Type=oneshot
ExecStart=/bin/bash -c "ssh-keygen -t ecdsa -q -N '' -f /run/ssh_host_ecdsa_key" ExecStart=/bin/bash -c "ssh-keygen -t ecdsa -q -N '' -f /run/ssh_host_ecdsa_key"
[Install] [Install]
WantedBy=network-pre.target WantedBy=multi-user.target

1
image/mirror/packages.txt
View File

@ -19,7 +19,6 @@ mokutil
nano nano
nano-default-editor nano-default-editor
nvme-cli nvme-cli
openssh
openssh-server openssh-server
passt-selinux passt-selinux
passwd passwd

1
image/sysroot-tree/etc/ssh/ssh_config
View File

@ -1 +0,0 @@
UserKnownHostsFile /run/known_hosts

2
image/sysroot-tree/etc/ssh/sshd_config
View File

@ -1 +1,3 @@
HostKey /run/ssh_host_ecdsa_key HostKey /run/ssh_host_ecdsa_key
TrustedUserCAKeys /run/ssh_ca.pub
PasswordAuthentication no