[v3,03/16] sshd-regen-keys: Issue sync after regeneration

Message ID	07a83fa777338c8765794db04cee2e57681b6e6f.1600788534.git.jan.kiszka@siemens.com
State	Accepted, archived
Headers	show Return-Path: <isar-users+bncBCJI7SMNV4NBBONQVD5QKGQEZNH7ZFQ@googlegroups.com> Received-SPF: pass (google.com: domain of isar-users+bncbcji7smnv4nbbonqvd5qkgqeznh7zfq@googlegroups.com designates 209.85.220.55 as permitted sender) client-ip=209.85.220.55; Sender: isar-users@googlegroups.com Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates 194.138.37.39 as permitted sender) client-ip=194.138.37.39; From: Jan Kiszka <jan.kiszka@siemens.com> To: isar-users <isar-users@googlegroups.com> Subject: [PATCH v3 03/16] sshd-regen-keys: Issue sync after regeneration Date: Tue, 22 Sep 2020 17:28:41 +0200 Message-Id: <07a83fa777338c8765794db04cee2e57681b6e6f.1600788534.git.jan.kiszka@siemens.com> In-Reply-To: <cover.1600788534.git.jan.kiszka@siemens.com> References: <cover.1600788534.git.jan.kiszka@siemens.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com
Series	Complete backlog: SDK, compat arch, assorting fixed and cleanups \| expand [v3,00/16] Complete backlog: SDK, compat arch, assorting fixed and cleanups [v3,01/16] Split up isar-apt into distro-arch specific instances [v3,02/16] linux-custom: Clean up minor inconsistencies in rules.tmpl [v3,03/16] sshd-regen-keys: Issue sync after regeneration [v3,04/16] meta-isar: Drop outdated cross-compilation comment [v3,05/16] qemuamd64: Fix OVMF path [v3,06/16] sdk: Add support for adding self-defined sdk packages [v3,07/16] sdk: Make all links in the SDK chroot relative [v3,08/16] sdk: Add script to relocate SDK [v3,09/16] sdk: Make shipping the isar-apt repo opt-in [v3,10/16] sdk: Inject sysroot path when calling relocated toolchain [v3,11/16] sdk: Update README.sdk [v3,12/16] Add compat architecture support via multiarch [v3,13/16] ci: Add compat arch support [v3,14/16] doc: Enhance list of supported cross-archs, drop QEMU reference [v3,15/16] doc: Describe new compat arch support [v3,16/16] isar-bootstrap: Connect to gpg-agent before adding keys

Message ID

07a83fa777338c8765794db04cee2e57681b6e6f.1600788534.git.jan.kiszka@siemens.com

State

Accepted, archived

Headers

Received-SPF: pass (google.com: domain of
	isar-users+bncbcji7smnv4nbbonqvd5qkgqeznh7zfq@googlegroups.com
	designates 209.85.220.55 as permitted sender)
	client-ip=209.85.220.55; 
Sender: isar-users@googlegroups.com
Received-SPF: pass (google.com: domain of jan.kiszka@siemens.com designates
	194.138.37.39 as permitted sender) client-ip=194.138.37.39; 
From: Jan Kiszka <jan.kiszka@siemens.com>
To: isar-users <isar-users@googlegroups.com>
Subject: [PATCH v3 03/16] sshd-regen-keys: Issue sync after regeneration
Date: Tue, 22 Sep 2020 17:28:41 +0200
Message-Id: <07a83fa777338c8765794db04cee2e57681b6e6f.1600788534.git.jan.kiszka@siemens.com>
In-Reply-To: <cover.1600788534.git.jan.kiszka@siemens.com>
References: <cover.1600788534.git.jan.kiszka@siemens.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Precedence: list
Mailing-list: list isar-users@googlegroups.com;
	contact isar-users+owners@googlegroups.com

Series

Complete backlog: SDK, compat arch, assorting fixed and cleanups | expand

Commit Message

Jan Kiszka Sept. 22, 2020, 7:28 a.m. UTC

From: Jan Kiszka <jan.kiszka@siemens.com>

This reduces the risk that a hard reset or power loss after the
regeneration leaves invalid key files behind, thus prevents that sshd
comes up again.

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
---
 meta/recipes-support/sshd-regen-keys/files/sshd-regen-keys.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-support/sshd-regen-keys/files/sshd-regen-keys.sh b/meta/recipes-support/sshd-regen-keys/files/sshd-regen-keys.sh
index 11fca3b4..910d879b 100644
--- a/meta/recipes-support/sshd-regen-keys/files/sshd-regen-keys.sh
+++ b/meta/recipes-support/sshd-regen-keys/files/sshd-regen-keys.sh
@@ -16,3 +16,5 @@  if test -n $SSHD_ENABLED; then
     echo "Reenabling ssh server ..."
     systemctl enable --no-reload ssh
 fi
+
+sync

[v3,03/16] sshd-regen-keys: Issue sync after regeneration

Commit Message

Patch