-
Notifications
You must be signed in to change notification settings - Fork 70
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
--root-ssh-authorized-keys
not work on the firstboot
#358
Comments
OK yeah I think the main failure may start from here
Possible fixes:
|
This ensures that systemd's creation of `/root` works instead of falling back to what we have in `/usr/lib/tmpfiles.d/rpm-ostree-0-integration.conf` for `d /var/roothome 0700 root root -` which in turn ensures that both the credential values as well as bootc's injection of a tmpfiles.d snippet for root SSH key works. containers/bootc#358
This ensures that systemd's creation of `/root` works instead of falling back to what we have in `/usr/lib/tmpfiles.d/rpm-ostree-0-integration.conf` for `d /var/roothome 0700 root root -` which in turn ensures that both the credential values as well as bootc's injection of a tmpfiles.d snippet for root SSH key works. containers/bootc#358 Signed-off-by: Colin Walters <walters@verbum.org>
This ensures that systemd's creation of `/root` works instead of falling back to what we have in `/usr/lib/tmpfiles.d/rpm-ostree-0-integration.conf` for `d /var/roothome 0700 root root -` which in turn ensures that both the credential values as well as bootc's injection of a tmpfiles.d snippet for root SSH key works. containers/bootc#358 Signed-off-by: Colin Walters <walters@verbum.org>
I can still see the error messages on first boot, but it's different from the original error messages since it won't tell us /root is not found.
|
Thanks hmm...I thought this was working for me, but yes, let's add an e2e CI test that is gating on this working (cc #373 ) |
As a followup for CentOS#371 this PR tweaks `tmpfiles.d/rpm-ostree-0-integration.conf` too so that there is only a single /var/roothome line for tmpfiles.d. This should fix containers/bootc#358
As a followup for CentOS#371 this PR tweaks `tmpfiles.d/rpm-ostree-0-integration.conf` too so that there is only a single /var/roothome line for tmpfiles.d. This should fix containers/bootc#358
I opened CentOS/centos-bootc#440 - I hope this fixes it (did not do an end-to-end test, sorry!). I want to use the --root-ssh-authorized-keys to test osbuild/images#462 :) |
As a followup for CentOS#371 this PR tweaks `tmpfiles.d/rpm-ostree-0-integration.conf` too so that there is only a single /var/roothome line for tmpfiles.d. This should fix containers/bootc#358
As a followup for CentOS#371 this PR tweaks `tmpfiles.d/provision.conf` so that there is only a single /var/roothome line for tmpfiles.d As it is both provision.conf and rpm-ostree-0-integration.conf define the same dir. This should fix containers/bootc#358
This may need a final tweak #407 - I still saw an issue when testing this but it seems the linked PR fixes it for me (but maybe there is a better way or I am missing something?) |
First boot:
Second boot:
The text was updated successfully, but these errors were encountered: