ignition

Commit Graph

Author	SHA1	Message	Date
Dustin	647cdb8346	ssh-host-certs: Run sshca-cli from a container Installing packages on the host system via `rpm-ostree` is _insanely_ slow, especially on Raspberry Pi devices. The main reason I chose to go that route for managing the SSH host certificates was to avoid having to maintain the systemd units in multiple places. I think the trade-off is worth it, though; bringing up a new Raspberry Pi is significantly faster, by 15+ minutes, if we do not have to wait for `rpm-ostree` at all.	2024-01-17 20:30:34 -06:00
Dustin	6dfde32a5e	Switch from Step CA to SSHCA SSH host certificates are now issued by SSHCA. The sshca-cli-systemd package contains the appropriate systemd units for it.	2024-01-06 19:57:48 -06:00

Author

SHA1

Message

Date

Dustin

647cdb8346

ssh-host-certs: Run sshca-cli from a container

Installing packages on the host system via `rpm-ostree` is _insanely_
slow, especially on Raspberry Pi devices.  The main reason I chose to go
that route for managing the SSH host certificates was to avoid having to
maintain the systemd units in multiple places.  I think the trade-off is
worth it, though; bringing up a new Raspberry Pi is significantly
faster, by 15+ minutes, if we do not have to wait for `rpm-ostree` at
all.

2024-01-17 20:30:34 -06:00

Dustin

6dfde32a5e

Switch from Step CA to SSHCA

SSH host certificates are now issued by SSHCA.  The *sshca-cli-systemd*
package contains the appropriate systemd units for it.

2024-01-06 19:57:48 -06:00

2 Commits (196ce46d5467095560a5785866d199677a2d13e1)