chore: pin ssh key and disable password login

2026-06-22 15:16:59 +08:00
parent 33638a5c0a
commit 0c8c90f42f
5 changed files with 27 additions and 0 deletions
--- a/vm.Dockerfile
+++ b/vm.Dockerfile
@@ -21,6 +21,7 @@ RUN sed -i "s#_REPO_#$CLOUD_CONFIG_REPO#g" /kitchen/overlay/daemon/update-keys.s
    sed -i "s#GATEWAY_ADDRESS#$CLOUD_GATEWAY_ADDRESS#g" /kitchen/overlay/etc/network/interfaces
 COPY --from=bubble-builder --chmod=755 /build/daemon /kitchen/overlay/usr/bin/bubble
 COPY --from=bubble-builder --chmod=755 /build/auth_server /kitchen/overlay/usr/bin/auth-server
+COPY ./secret/* /kitchen/overlay/etc/ssh/
 RUN --security=insecure \
 	 --mount=type=bind,from=host-modules,source=/,target=/lib/modules \
    cd /kitchen && rm -f vm.raw && ALPINE_BRANCH="3.24" ./build-image.sh