From e6feb8a50cf325a59e63120c1b709f1636058404 Mon Sep 17 00:00:00 2001
From: Peter Sabaini <peter.sabaini@canonical.com>
Date: Mon, 19 Feb 2024 17:02:06 +0100
Subject: [PATCH] Fix ssh key for bootstrapping

Create a dedicated passwordless ssh key for bootstrapping the local juju
controller

Fixes https://bugs.launchpad.net/snap-openstack/+bug/2054328

Signed-off-by: Peter Sabaini <peter.sabaini@canonical.com>
---
 sunbeam-python/sunbeam/commands/prepare_node.py | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/sunbeam-python/sunbeam/commands/prepare_node.py b/sunbeam-python/sunbeam/commands/prepare_node.py
index 0caf8a0a8..8d36bdcd8 100644
--- a/sunbeam-python/sunbeam/commands/prepare_node.py
+++ b/sunbeam-python/sunbeam/commands/prepare_node.py
@@ -69,9 +69,16 @@
 newgrp snap_daemon
 
 # Generate keypair and set-up prompt-less access to local machine
-[ -f $HOME/.ssh/id_rsa ] || ssh-keygen -b 4096 -f $HOME/.ssh/id_rsa -t rsa -N ""
-cat $HOME/.ssh/id_rsa.pub >> $HOME/.ssh/authorized_keys
+[ -f $HOME/.ssh/id_rsa_snap-openstack ] || \
+  ssh-keygen -b 4096 -f $HOME/.ssh/id_rsa_snap-openstack -t rsa -N ""
+cat $HOME/.ssh/id_rsa_snap-openstack.pub >> $HOME/.ssh/authorized_keys
 ssh-keyscan -H $(hostname --all-ip-addresses) >> $HOME/.ssh/known_hosts
+[ -f $HOME/.ssh/config ] || \
+  ( touch $HOME/.ssh/config ; chmod 0600 $HOME/.ssh/config )
+cat >> $HOME/.ssh/config <<EOF
+Host $( hostname --all-ip-addresses | paste -s )
+  IdentityFile ~/.ssh/id_rsa_snap-openstack
+EOF
 
 # Install the Juju snap
 sudo snap install --channel {JUJU_CHANNEL} juju