Jenkins agents need to have a pre-built cache of SSH public keys for any
host jobs need to access. This file is typically bind-mounted into
jobs' containers.
For the older Fedora-based agent nodes, the `ssh_known_hosts` file is
populated by Ansible. That mechanism will not work for agent nodes
using the immutable root filesystem created by this project, so we need
an alternative. To that end, the `fetch-ssh-knownhosts` service
downloads the keys from another machine using HTTPS when the system
boots up and then periodically while it is running.
Dustin
4e05173ae1