Timothée Ravier
e3597c03f1
Make sshd & sshd@ units want ssh-host-keys-migration.service
...
Enabling the unit via the presets does not enable it on
Silverblue/Kinoite/Sericea & IoT as we don't re-preset all units like
it's done in Fedora CoreOS.
See: https://pagure.io/workstation-ostree-config/pull-request/246
Instead, have the sshd & sshd@ service unit `Wants` the
ssh-host-keys-migration service unit so that it's pulled-in only when
sshd is effectively enabled and in all cases.
See: https://src.fedoraproject.org/rpms/fedora-release/pull-request/253
See: https://bugzilla.redhat.com/show_bug.cgi?id=2172956
See: https://src.fedoraproject.org/rpms/fedora-release/pull-request/252
2023-03-14 17:17:24 +01:00
Jakub Jelen
dfeecfb1e8
Drop loading of anaconda configuration from sysconfig including scriptlet to migrate to include drop-in directory
2020-07-31 15:26:55 +02:00
Jakub Jelen
868439f73a
Stop loading crypto policy for command line in service files
2020-06-10 14:35:23 +02:00
Jakub Jelen
358f62be8a
As agreed with anaconda team, they will provide a environment file under /etc/sysconfig ( #1722928 )
...
See anaconda pull request for discussion:
https://github.com/rhinstaller/anaconda/pull/2042
2019-07-12 23:20:56 +02:00
Jakub Jelen
92b8e55bea
Crypto policies changed path
2018-03-06 13:53:17 +01:00
Jakub Jelen
0ce6c7b710
Another approach for crypto policies ( #1479271 )
2017-08-14 09:42:02 +02:00
Jakub Jelen
6a05936971
Revert "server crypto policy"
...
This reverts commit 1d8ffcfe05
2017-08-09 14:58:13 +02:00
Jakub Jelen
1d8ffcfe05
Preprocess the configuration files to include crypto policies.
...
* The services are using ExecPre to start sshd-pre script
* The sshd-pre script substitutes token in standard configuration file and writes a new on in /run
* The services are using a file in /run as a sshd_config
2017-08-02 15:46:57 +02:00
Jakub Jelen
5489ace8dc
Add sshd-keygen.target to abstract key creation from sshd.service and sshd@.service ( #1325535 )
...
* PartOf is needed to trigger sshd-keygen checks for sshd.service restarts
* sshd-keygen.target makes a level of abstraction to eliminate dupplicate
dependencies on both sshd and sshd@ services
2016-04-15 17:05:32 +02:00
Jakub Jelen
e581af0a84
Add missing documentation link to systemd service files (RHBZ#1181593)
2015-01-14 16:51:44 +01:00
Petr Lautrbach
d1c2eb285e
slightly change systemd units logic - use sshd-keygen.service ( #1066615 )
2014-06-03 17:47:56 +02:00
Petr Lautrbach
678b8081f1
add socket activated sshd units to the package ( #963268 )
2013-05-21 18:37:18 +02:00
Tomas Mraz
17eb1038b2
still support /etc/sysconfig/sshd loading in sshd service ( #754732 )
2011-11-18 09:20:54 +01:00
Jan F
273d637227
Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
...
Split out the host keygen into their own command, to ease future migration
to systemd. Compatitbility with the init script was kept.
Migrate the package to full native systemd unit files, according to the Fedora
packaging guidelines.
Prepate the unit files for running an ondemand server. (do not add it actually)
2011-06-28 12:01:11 +02:00
