[pve-devel] [PATCH qemu-server] cloud-init: don't regenerate ssh hosts key on config change when vm is running

[aderumier at odiso.com]

> Hi,
> 
> There is something indeed annoying with that module, as I always end
> up
> adding ssh_deletekeys: false in a provisionned server, but I like
> that
> it does it the first time indeed…
> 
> Maybe we could let it be configurable though!

Yes, I don't known too much how to handle it at first boot only.

Maybe when we create a template, we could add an option like:
ssh_deleteys:true."
then remove it from vm config when vm start ? (and add in gui an option
to reset it to true manually ?)



i'm looking to use cloud-init to online change too, currently I'm able
to it with this udev rules

/etc/udev/rules.d/90-cloudinit.rules
ACTION=="change", SUBSYSTEM=="block", KERNEL=="sr[0-9]*",
ENV{ID_FS_LABEL}=="config-2", RUN+="/usr/local/bin/cloudinit-reload.sh"

/usr/local/bin/cloudinit-reload.sh
---------------------------------------------
#!/bin/bash

if test -f /tmp/cloudinitreload.lock; then
    rm /run/cloud-init/.instance-id
    rm /run/cloud-init/network-config-ready
    systemctl restart cloud-init-local.service
    systemctl restart cloud-init.service
    systemctl reload networking
    rm /tmp/cloudinitreload.lock
    exit 1
fi
touch /tmp/cloudinitreload.lock




Le mercredi 13 janvier 2021 à 17:40 +0100, Gilles Pietri a écrit :
> Le 13/01/2021 à 10:01, Alexandre Derumier a écrit :
> > Currently, we always regenerate sshkeys on any config change.
> > 
> > It should be done only before the first vm start, but currently
> > can't known that.
> > 
> > So, this patch only do it when vm is running.
> 
> Hi,
> 
> There is something indeed annoying with that module, as I always end
> up
> adding ssh_deletekeys: false in a provisionned server, but I like
> that
> it does it the first time indeed…
> 
> Maybe we could let it be configurable though!
> 
> Gilou
> 
> _______________________________________________
> pve-devel mailing list
> pve-devel at lists.proxmox.com
> https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel