particle-os/debian-forge-composer
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

tools/gen-ssh: upgrade openssh before generating key

Browse source 
openssl gets installed as a dependency of the osbuild-composer-tests but
it might not update openssh at the same time, which can cause a version
mismatch when running ssh-keygen:

  OpenSSL version mismatch. Built against 30000000, you have 30200010

This is currently happening in CentOS Stream 9 so let's make sure
openssh is up to date before running ssh-keygen.
This commit is contained in:
Achilleas Koutsou 2024-05-23 19:06:43 +02:00
parent f09aab365a
commit 4241f5bb39
1 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
tools/gen-ssh.sh
View file

@ -3,6 +3,15 @@
# Create SSH key
SSH_DATA_DIR="$(mktemp -d)"
SSH_KEY=${SSH_DATA_DIR}/id_rsa
# openssl gets installed as a dependency of the osbuild-composer-tests but it
# might not update openssh at the same time, which can cause a version mismatch
# when running ssh-keygen:
#
# OpenSSL version mismatch. Built against 30000000, you have 30200010
#
# Make sure openssh is up to date before running ssh-keygen
sudo dnf -y upgrade openssh > /dev/null
ssh-keygen -f "${SSH_KEY}" -N "" -q -t rsa-sha2-256 -b 2048
# Change cloud-init/user-data ssh key