X-Git-Url: https://iankelling.org/git/?p=automated-distro-installer;a=blobdiff_plain;f=fai-redep;h=5306d9736707a8b683e9fdb4da8be9a57889659f;hp=1a7ed88654271b43cf338a4fbdefd2ed9fbc5b90;hb=c47175685b348735b3440e16851dde2cc39b6f3f;hpb=ac4e0089e245c96a388b8fcdd92fc05da3399694 diff --git a/fai-redep b/fai-redep index 1a7ed88..5306d97 100755 --- a/fai-redep +++ b/fai-redep @@ -62,7 +62,7 @@ pall+=($(/a/bin/buildscripts/emacs -p; /a/bin/distro-setup/distro-pkgs $distro)) ssh root@$faiserver_host dd of=/srv/fai/config/package_config/DESKTOP 2>/dev/null ||: # broken pipe -rsync -r --delete /a/bin/fai-basefiles/basefiles root@$faiserver_host:/srv/fai/config +rsync -rplt --delete /a/bin/fai-basefiles/basefiles root@$faiserver_host:/srv/fai/config ssh root@$faiserver_host bash <<'EOF' set -eE -o pipefail set -x @@ -78,13 +78,14 @@ chmod -R a+rX /srv/fai/config/distro-install-common changed=false f=/srv/fai/nfsroot/root/.ssh/known_hosts +install -d -m 700 /srv/fai/nfsroot/root/.ssh # the known hosts entries that fai already sets up are like # IP,HOSTNAME key_info... # we are skipping the ip, because it doesn't block ssh # with a prompt as long as you have the user supplied hostname, # and i don't want to deal with getting it, it's not adding # any important security in this case. -if ! grep -xFq "$line" $f; then +if ! grep -xFq "$line" $f &>/dev/null; then changed=true printf "%s\n" "$line" >>$f fi