30 lines
1.6 KiB
Diff
30 lines
1.6 KiB
Diff
diff --git a/scripts/felhom-host-install.sh b/scripts/felhom-host-install.sh
|
|
index 970109fd..349da0c5 100644
|
|
--- a/scripts/felhom-host-install.sh
|
|
+++ b/scripts/felhom-host-install.sh
|
|
@@ -1417,6 +1417,12 @@ run_uninstall() {
|
|
if [[ -f /etc/default/grub.d/zz-felhom-kernel-default.cfg ]]; then
|
|
log_info " kept /etc/default/grub.d/zz-felhom-kernel-default.cfg (the kernel this box booted healthily stays the default)"
|
|
fi
|
|
+ # R-982 (operator ruling D4, 2026-10-22; agent bundle after v0.162.0): the host sshd's root-key-only drop-in. The
|
|
+ # uninstall gives the host back as Proxmox set it up, so the drop-in goes and sshd is reloaded (open sessions stay).
|
|
+ if [[ -f /etc/ssh/sshd_config.d/10-felhom-root-key-only.conf ]]; then
|
|
+ run rm -f /etc/ssh/sshd_config.d/10-felhom-root-key-only.conf
|
|
+ run systemctl reload ssh 2>/dev/null || true
|
|
+ fi
|
|
# 1.31.0 (R-840): the bundle's previous copies and the wrapper's nonce record.
|
|
if [[ -d /var/lib/felhom-os-apply ]]; then run rm -rf /var/lib/felhom-os-apply; fi
|
|
if [[ -f /var/lib/vz/snippets/felhom-guest-hook.sh ]]; then run rm -f /var/lib/vz/snippets/felhom-guest-hook.sh; fi
|
|
diff --git a/scripts/test_hostinstall.py b/scripts/test_hostinstall.py
|
|
index 3f7088a6..e9cf9ad9 100644
|
|
--- a/scripts/test_hostinstall.py
|
|
+++ b/scripts/test_hostinstall.py
|
|
@@ -60,6 +60,7 @@ BUNDLE_DESTS = [
|
|
"/etc/systemd/system/felhom-sshd.service",
|
|
"/etc/felhom-oob.nft",
|
|
"/etc/systemd/system/felhom-oob-nft.service",
|
|
+ "/etc/ssh/sshd_config.d/10-felhom-root-key-only.conf", # R-982, operator ruling D4 (2026-10-22)
|
|
"/etc/sudoers.d/felhom-op",
|
|
"/etc/sudoers.d/felhom-agent",
|
|
]
|