geoffrey/dotfiles
geoffrey/dotfiles
1
0
Fork 0
Code Issues7 Pull requests Releases Activity

remote-builds: Fix host key verification

Browse source
This commit is contained in:
Geoffrey Frogeye 2025-01-23 17:32:15 +01:00
parent 875ea5d137
commit fafc4d45b7
Signed by: geoffrey
GPG key ID: C72403E7F82E6AD8
1 changed files with 3 additions and 0 deletions

3
os/remote-builds/default.nix
View file

@ -54,7 +54,10 @@ in
ControlPath ~/.ssh/master-%r@%n:%p ControlPath ~/.ssh/master-%r@%n:%p
ControlPersist 60s ControlPersist 60s
VerifyHostKeyDNS yes VerifyHostKeyDNS yes
UpdateHostKeys yes
'') vivariumBuilders '') vivariumBuilders
# Check SSHFP records so hopefully no need to manually add SSH host keys,
# yet add them to known_hosts should we not be using DNSSEC-validating DNS.
) )
) )
} > /root/.ssh/config } > /root/.ssh/config