slice 7: golden host-key unit path fix + live-validation results (v0.8.0)

Live validation on demo-felhom caught the felhom-regen-hostkeys unit failing with
203/EXEC: ExecStart was /usr/sbin/ssh-keygen but on Debian 13 ssh-keygen is at
/usr/bin/ssh-keygen. Fixed build-golden.sh, rebuilt the golden, re-validated — host
keys now regenerate on first boot by the baked unit (agent issues no ssh-keygen).

All three live scenarios green: provision (fresh MAC, host keys via unit, machine-id,
Docker, DHCP), dr (continuity: hostname + host keys preserved), Recover (killed
mid-restore -> orphan rolled back idempotently). REPORT + CHANGELOG updated.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

This commit is contained in:

authentik Default Admin

2026-06-09 21:37:40 +02:00

parent 57405c1a99

commit 6e036e4c75

3 changed files with 32 additions and 13 deletions

									
										configs/build-golden.sh
									
		+1
		-1
	
												View File
												
				@@ -64,7 +64,7 @@ Before=ssh.service sshd.service

				[Service]

				Type=oneshot

				RemainAfterExit=yes

				ExecStart=/usr/sbin/ssh-keygen -A

				ExecStart=/usr/bin/ssh-keygen -A

				[Install]

				WantedBy=multi-user.target