remote-builds: Fix host key verification

2025-01-23 17:32:15 +01:00 · 2025-01-23 17:32:15 +01:00 · fafc4d45b7
parent 875ea5d137
commit fafc4d45b7
1 changed files with 3 additions and 0 deletions
--- a/os/remote-builds/default.nix
+++ b/os/remote-builds/default.nix
@ -54,7 +54,10 @@ in
                  ControlPath ~/.ssh/master-%r@%n:%p
                  ControlPersist 60s
                  VerifyHostKeyDNS yes
+                  UpdateHostKeys yes
              '') vivariumBuilders
+              # Check SSHFP records so hopefully no need to manually add SSH host keys,
+              # yet add them to known_hosts should we not be using DNSSEC-validating DNS.
            )
          )
        } > /root/.ssh/config