commit fa8f64cc98879d31559540f724f64f11060b283c · keea.dog/knot-spindle

-1

rootfs/etc/s6-overlay/s6-rc.d/create-sshd-host-keys/type

···

       1
       1
       -
       oneshot

-1

rootfs/etc/s6-overlay/s6-rc.d/create-sshd-host-keys/up

···

       1
       1
       -
       /etc/s6-overlay/scripts/create-sshd-host-keys

rootfs/etc/s6-overlay/s6-rc.d/sshd/dependencies.d/base

This is a binary file and will not be displayed.

rootfs/etc/s6-overlay/s6-rc.d/sshd/dependencies.d/create-sshd-host-keys

This is a binary file and will not be displayed.

-3

rootfs/etc/s6-overlay/s6-rc.d/sshd/run

···

       1
       1
       -
       #!/usr/bin/execlineb -P

     

       2
       2
       -
       

     

       3
       3
       -
       /usr/sbin/sshd -e -D

-1

rootfs/etc/s6-overlay/s6-rc.d/sshd/type

···

       1
       1
       -
       longrun

rootfs/etc/s6-overlay/s6-rc.d/user/contents.d/sshd

This is a binary file and will not be displayed.

-21

rootfs/etc/s6-overlay/scripts/create-sshd-host-keys

···

       1
       1
       -
       #!/usr/bin/execlineb -P

     

       2
       2
       -
       

     

       3
       3
       -
       foreground {

     

       4
       4
       -
         if -n { test -d /etc/ssh/keys }

     

       5
       5
       -
         mkdir /etc/ssh/keys

     

       6
       6
       -
       }

     

       7
       7
       -
       

     

       8
       8
       -
       foreground {

     

       9
       9
       -
         if -n { test -f /etc/ssh/keys/ssh_host_rsa_key }

     

       10
       10
       -
         ssh-keygen -t rsa -f /etc/ssh/keys/ssh_host_rsa_key -q -N ""

     

       11
       11
       -
       }

     

       12
       12
       -
       

     

       13
       13
       -
       foreground {

     

       14
       14
       -
         if -n { test -f /etc/ssh/keys/ssh_host_ecdsa_key }

     

       15
       15
       -
         ssh-keygen -t rsa -f /etc/ssh/keys/ssh_host_ecdsa_key -q -N ""

     

       16
       16
       -
       }

     

       17
       17
       -
       

     

       18
       18
       -
       foreground {

     

       19
       19
       -
         if -n { test -f /etc/ssh/keys/ssh_host_ed25519_key }

     

       20
       20
       -
         ssh-keygen -t rsa -f /etc/ssh/keys/ssh_host_ed25519_key -q -N ""

     

       21
       21
       -
       }

-8

rootfs/etc/s6-overlay/scripts/keys-wrapper

···

       1
       1
       -
       #!/bin/sh

     

       2
       2
       -
       

     

       3
       3
       -
       # Execute the knot keys command with proper shell context

     

       4
       4
       -
       exec /bin/sh -c '/usr/bin/knot keys -output authorized-keys \

     

       5
       5
       -
           -internal-api "http://${KNOT_SERVER_INTERNAL_LISTEN_ADDR:-localhost:5444}" \

     

       6
       6
       -
           -git-dir "${KNOT_REPO_SCAN_PATH:-/home/git/repositories}" \

     

       7
       7
       -
           -log-path "/tmp/knotguard.log"'

     

       8
       8
       -

-3

rootfs/etc/ssh/sshd_config.d/authorized_keys_command.conf

···

       1
       1
       -
       Match User git

     

       2
       2
       -
         AuthorizedKeysCommand /usr/bin/knot keys -o authorized-keys -git-dir /home/git/repositories

     

       3
       3
       -
         AuthorizedKeysCommandUser nobody

-9

rootfs/etc/ssh/sshd_config.d/tangled_sshd.conf

···

       1
       1
       -
       HostKey /etc/ssh/keys/ssh_host_rsa_key

     

       2
       2
       -
       HostKey /etc/ssh/keys/ssh_host_ecdsa_key

     

       3
       3
       -
       HostKey /etc/ssh/keys/ssh_host_ed25519_key

     

       4
       4
       -
       

     

       5
       5
       -
       PasswordAuthentication no

     

       6
       6
       -
       

     

       7
       7
       -
       Match User git

     

       8
       8
       -
         AuthorizedKeysCommand /etc/s6-overlay/scripts/keys-wrapper

     

       9
       9
       -
         AuthorizedKeysCommandUser nobody