updates for t11 and fsf

[automated-distro-installer] / fai / config / hooks / instsoft.DEFAULT

diff --git a/fai/config/hooks/instsoft.DEFAULT b/fai/config/hooks/instsoft.DEFAULT
index 9d8f0b77fbd51b1be686c97aeab206fe9d27034b..5c7be4e777a920f327931cab7d82a57050eeb2dd 100755 (executable)
--- a/fai/config/hooks/instsoft.DEFAULT
+++ b/fai/config/hooks/instsoft.DEFAULT
@@ -37,17 +37,21 @@ if [[ ${files[0]}  ]]; then
 fi
 
 
-#### this bit is duplicated in rootsshsync, except we skip update-initramfs,
-# since I suspect its not needed. I'm not sure any of this is needed
-# since we initially embed the key, and with distro-begin, we run rootsshsync
-# around the same time as we remove it.
-d=/etc/initramfs-tools
-if [[ -e $d ]] && ! diff -q /root/.ssh/authorized_keys $d/root/.ssh/authorized_keys &>/dev/null; then
-  mkdir -p $d/root/.ssh /etc/dropbear-initramfs
-  chmod 700 $d/root $d/root/.ssh
-  cp -p /root/.ssh/authorized_keys $d/root/.ssh/authorized_keys
-  cp -p /root/.ssh/authorized_keys /etc/dropbear-initramfs
-  if [[ -e /root/.ssh/authorized_keys2 ]]; then
-    cat /root/.ssh/authorized_keys2 >>/etc/dropbear-initramfs
-  fi
+#### This bit is duplicated in rootsshsync, except we skip
+#### update-initramfs and add $target
+####
+# We generally shouldn't need this, because we don't ssh in on the 1st
+# reboot since we initially embed the luks key, and with distro-begin,
+# we run rootsshsync around the same time as we remove it. However, it
+# could be helpful in case of problems.
+
+auth_dir=$target/etc/dropbear/initramfs/
+candidate=$(apt-cache policy dropbear-initramfs | awk '$1 == "Candidate:" { print $2 }' | head -n1 ||:)
+if [[ $candidate ]] && dpkg --compare-versions "$candidate" lt 2020.81-4; then
+  auth_dir=$target/etc/dropbear-initramfs
+fi
+auth_file=$auth_dir/authorized_keys
+mkdir -p $auth_dir
+if [[ ! -e $auth_file ]] || ! diff -q /root/.ssh/authorized_keys $auth_file; then
+  cp -p /root/.ssh/authorized_keys $auth_file
 fi