Persist knot SSH host keys across pod restarts · sans-self.org/infrastructure@914f321

this repo has no description

Persist knot SSH host keys across pod restarts

Mount sshd-keys subPath from JuiceFS PVC at /etc/ssh/keys so host
keys survive container recreation. The s6 create-sshd-host-keys
service already skips generation when keys exist.

sans-self.org 3 weeks ago 914f3213 4a7feb33

1 changed file

expand all

k8s

knot

deployment.yaml

k8s/knot/deployment.yaml

··· 32 32 volumeMounts: 33 33 - name: data 34 34 mountPath: /home/git 35 + - name: data 36 + mountPath: /etc/ssh/keys 37 + subPath: sshd-keys 35 38 - name: sshd-hardening 36 39 mountPath: /etc/ssh/sshd_config.d/hardening.conf 37 40 subPath: hardening.conf