From f06d9a81e7188e775344919f3cbcf914d54b5ae2 Mon Sep 17 00:00:00 2001 From: Jarrod Johnson Date: Tue, 4 Mar 2025 10:04:30 -0500 Subject: [PATCH] Have sshd only generate ed25519 during initramfs phase of diskless. sshd-keygen service will come later with other keys, if desired. --- .../usr/lib/dracut/hooks/cmdline/10-confluentdiskless.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/confluent_osdeploy/el9-diskless/initramfs/usr/lib/dracut/hooks/cmdline/10-confluentdiskless.sh b/confluent_osdeploy/el9-diskless/initramfs/usr/lib/dracut/hooks/cmdline/10-confluentdiskless.sh index 9b885e82..19489b43 100644 --- a/confluent_osdeploy/el9-diskless/initramfs/usr/lib/dracut/hooks/cmdline/10-confluentdiskless.sh +++ b/confluent_osdeploy/el9-diskless/initramfs/usr/lib/dracut/hooks/cmdline/10-confluentdiskless.sh @@ -292,7 +292,7 @@ if [[ $confluent_websrv == *:* ]] && [[ $confluent_websrv != "["* ]]; then confluent_websrv="[$confluent_websrv]" fi echo -n "Initializing ssh..." -ssh-keygen -A +ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key -C '' -N '' for pubkey in /etc/ssh/ssh_host*key.pub; do certfile=${pubkey/.pub/-cert.pub} privfile=${pubkey%.pub}