Skip to content

Commit 749c4ca

Browse files
committed
backing off on the idea of an early ssh access that is more harmful than helpful
1 parent c6e4ceb commit 749c4ca

File tree

1 file changed

+12
-6
lines changed

1 file changed

+12
-6
lines changed

build.sh

+12-6
Original file line numberDiff line numberDiff line change
@@ -353,12 +353,18 @@ EOF
353353
# build/passwd copied out by prep.sh
354354
sed -e "s@^root:[^:]*:\(.*\)@root:$ROOT_PASSWORD:\1@" ${VARIANT}/passwd >$OVERLAY/etc/passwd
355355

356-
# recent bootCDs rely on a standard systemd startup sequence
357-
# so allow debug key to enter in this context whenever that makes sense
358-
mkdir -p $OVERLAY/root/.ssh
359-
chmod 700 $OVERLAY/root/.ssh
360-
cp $PLC_DEBUG_SSH_KEY_PUB $OVERLAY/root/.ssh/authorized_keys
361-
chmod 600 $OVERLAY/root/.ssh/authorized_keys
356+
# this is more harmful than helpful
357+
# idea being, since we start a full-featured fedora system now, it would
358+
# have been nice to be able to enter sshd very early on - before bm has even been downloaded
359+
# however somehow it appears that these lines ruin all chances to enter ssh at all
360+
# either early or even later on;
361+
# plus, it is unclear what this would give on non=systemd nodes, so I am backing off for now
362+
# # recent bootCDs rely on a standard systemd startup sequence
363+
# # so allow debug key to enter in this context whenever that makes sense
364+
# mkdir -p $OVERLAY/root/.ssh
365+
# chmod 700 $OVERLAY/root/.ssh
366+
# cp $PLC_DEBUG_SSH_KEY_PUB $OVERLAY/root/.ssh/authorized_keys
367+
# chmod 600 $OVERLAY/root/.ssh/authorized_keys
362368

363369
# Install node configuration file (e.g., if node has no floppy disk or USB slot)
364370
if [ -f "$NODE_CONFIGURATION_FILE" ] ; then

0 commit comments

Comments
 (0)