Skip to content

Commit acccd5d

Browse files
committed
image_build: add note about initramfs SSH key reusal security
1 parent d599458 commit acccd5d

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

image_build/preseed.cfg

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,8 @@ d-i grub-installer/bootdev string default
6464
d-i finish-install/reboot_in_progress note
6565

6666
# Prepare for the Ansible bootstrap
67+
# TODO is using same SSH key in encrypted system and initramfs a security risk?
68+
# or rather, how much of a security risk is it?
6769
d-i preseed/late_command string \
6870
echo "ansible_bootstrap ALL=(ALL:ALL) NOPASSWD:ALL" > /target/etc/sudoers.d/01-ansible_bootstrap ; \
6971
mkdir /target/home/ansible_bootstrap/.ssh ; \

0 commit comments

Comments
 (0)