From mboxrd@z Thu Jan  1 00:00:00 1970
Return-path: <ptxdist-bounces@pengutronix.de>
Received: (from localhost user: 'ladis' uid#1021 fake: STDIN
 (ladis@eddie.linux-mips.org)) by eddie.linux-mips.org
 id S23990490AbgKOKGNpjMS0 (ORCPT <rfc822;ptxdist@pengutronix.de>
 + 1 other); Sun, 15 Nov 2020 11:06:13 +0100
Date: Sun, 15 Nov 2020 11:06:12 +0100
From: Ladislav Michl <ladis@linux-mips.org>
Message-ID: <20201115100612.GA346376@lenoch>
References: <20201113141955.3477005-1-artur@4wiebe.de>
 <20201113174648.GA292963@lenoch>
 <20201114203447.y34nu2vjtlekvzc2@pengutronix.de>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <20201114203447.y34nu2vjtlekvzc2@pengutronix.de>
Subject: Re: [ptxdist] [PATCH] DRAFT: openssh: make host key generation
 optional
List-Id: PTXdist Development Mailing List <ptxdist.pengutronix.de>
List-Unsubscribe: <http://metis.pengutronix.de/cgi-bin/mailman/options/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=unsubscribe>
List-Archive: <http://metis.pengutronix.de/cgi-bin/mailman/private/ptxdist/>
List-Post: <mailto:ptxdist@pengutronix.de>
List-Help: <mailto:ptxdist-request@pengutronix.de?subject=help>
List-Subscribe: <http://metis.pengutronix.de/cgi-bin/mailman/listinfo/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=subscribe>
Reply-To: ptxdist@pengutronix.de
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: ptxdist-bounces@pengutronix.de
Sender: "ptxdist" <ptxdist-bounces@pengutronix.de>
To: Roland Hieber <rhi@pengutronix.de>
Cc: Artur Wiebe <artur@4wiebe.de>, ptxdist@pengutronix.de

On Sat, Nov 14, 2020 at 09:34:47PM +0100, Roland Hieber wrote:
> On Fri, Nov 13, 2020 at 06:46:48PM +0100, Ladislav Michl wrote:
> > On Fri, Nov 13, 2020 at 03:19:55PM +0100, Artur Wiebe wrote:
> > > How can openssh.postinst be disabled from within the rule files?
> > 
> > The very same could be achieved with symlink in your BSP:
> > projectroot/etc/rc.once.d/openssh -> /dev/null
> 
> I don't understand why you want to disable this. The SSH server will not
> start without host keys. Or do you want to install a static version of
> the host keys generated at build time? 

Yes, keys are static, generated at build time. Root filesystem is
read-only.

> If so, there should be an option for this. But for now, in my opinion,
> disabling OPENSSH_SSHD_GENKEYS will just lead to a broken SSH server.

As this is easy to solve at BSP level I never thought it could
be a thing :)

	ladis

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de