commit ae4750868c4d79ed74393b73447b2d1e643b0533 · pyrox.dev/nixpkgs

pyrox.dev / nixpkgs

lol

nixos/ec2-data fix host fingerprint output to console (regression)

PR #322282 introduced a regression that causes the previous display of
the ssh host key fingerprints to get directed to the journal rather than
the console (as intended). Thus, the console only logs an empty set of
fingerprints:

-----BEGIN SSH HOST KEY FINGERPRINTS-----
-----END SSH HOST KEY FINGERPRINTS-----

The fix is to reorder the bash statement that invokes ssh-keygen so
that the ssh-keygen output is directed to /dev/console.

Bruce Toll 9 months ago ae475086 2d3a45d0

options

unified split

Changed files

+1 -1

nixos

modules

virtualisation

ec2-data.nix

+1 -1

nixos/modules/virtualisation/ec2-data.nix

···

       87
       87
        
               # ec2-get-console-output.

     

       88
       88
        
               echo "-----BEGIN SSH HOST KEY FINGERPRINTS-----" > /dev/console

     

       89
       89
        
               for i in /etc/ssh/ssh_host_*_key.pub; do

     

       90
       90
       -
                   ${config.programs.ssh.package}/bin/ssh-keygen -l -f "$i" || true > /dev/console

     

       90
       90
       +
                   ${config.programs.ssh.package}/bin/ssh-keygen -l -f "$i" > /dev/console || true

     

       91
       91
        
               done

     

       92
       92
        
               echo "-----END SSH HOST KEY FINGERPRINTS-----" > /dev/console

     

       93
       93
        
             '';