get fresh ssh keys on boot

omniosorg · Jun 15, 2020 · afc35de · afc35de
1 parent 51261d5
commit afc35de
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/ubuntu/helpers/build.sh b/ubuntu/helpers/build.sh
@@ -50,6 +50,11 @@ cp makedev /etc/apt/preferences.d/makedev
 cp locale.conf /etc/locale.conf
 cp locale /etc/default/locale
 
+# make sure we get fresh ssh keys on first boot
+/bin/rm -f -v /etc/ssh/ssh_host_*_key*
+cp regenerate_ssh_host_keys.service /etc/systemd/system
+systemctl daemon-reload
+systemctl enable regenerate_ssh_host_keys
 # Remove the divert that disables services
 rm -f /sbin/initctl
 dpkg-divert --local --rename --remove /sbin/initctl

diff --git a/ubuntu/helpers/regenerate_ssh_host_keys.service b/ubuntu/helpers/regenerate_ssh_host_keys.service
@@ -0,0 +1,11 @@
+[Unit]
+Description=Regenerate SSH host keys
+Before=ssh.service
+
+[Service]
+Type=oneshot
+ExecStart=/usr/bin/ssh-keygen -A -v
+ExecStartPost=/bin/systemctl disable regenerate_ssh_host_keys
+
+[Install]
+WantedBy=multi-user.target