fix: drop sshd-authorized-keys workaround #103

Merged
pwhalen merged 1 commit from f44-drop-ssh into f44 2026-02-26 20:22:51 +00:00
2 changed files with 0 additions and 20 deletions

View file

@ -4,8 +4,6 @@ include:
- composefs.yaml
# Read only sysroot
- sysroot-ro.yaml
# SSH authorized keys configuration for Ignition
- sshd-authorized-keys.yaml
ref: fedora/devel/${basearch}/iot
repos: []
selinux: true

View file

@ -1,18 +0,0 @@
# Configuration to have OpenSSH read authorized keys from files in
# ~/.ssh/authorized_keys.d/* in addition to ~/.ssh/authorized_keys
# This enables Ignition to write keys to authorized_keys.d/ignition
#
# Replaces the deprecated ssh-key-dir package
# See: https://github.com/coreos/ssh-key-dir/issues/188
# See: https://github.com/coreos/fedora-coreos-config/pull/3885
postprocess:
- |
#!/usr/bin/env bash
set -xeuo pipefail
# Configure sshd to read keys from authorized_keys.d directory
cat > /etc/ssh/sshd_config.d/90-authorized-keys-file.conf << 'EOF'
# Also accept keys configured by Ignition and Afterburn
AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys.d/*
EOF