···

       
435
       
435
       
 
       
                # socket activation, it goes to the remote side (#19589).

     

       
436
       
436
       
 
       
                exec >&2

     

       
437
       
437
       
 
       


     

       
438
       
438
       
-
       
                mkdir -m 0755 -p /etc/ssh

     

       
439
       
439
       
-
       


     

       
440
       
438
       
 
       
                ${flip concatMapStrings cfg.hostKeys (k: ''

     

       
441
       
439
       
 
       
                  if ! [ -s "${k.path}" ]; then

     

       
442
       
440
       
 
       
                      if ! [ -h "${k.path}" ]; then

     

       
443
       
441
       
 
       
                          rm -f "${k.path}"

     

       
444
       
442
       
 
       
                      fi

     

       
443
       
443
       
+
       
                      mkdir -m 0755 -p "$(dirname '${k.path}')"

     

       
445
       
444
       
 
       
                      ssh-keygen \

     

       
446
       
445
       
 
       
                        -t "${k.type}" \

     

       
447
       
446
       
 
       
                        ${if k ? bits then "-b ${toString k.bits}" else ""} \