[libvirt] [jenkins-ci PATCH 1/5] guests: Explicitly enable ssh root login in kickstart
Andrea Bolognani
abologna at redhat.com
Fri Nov 8 14:19:53 UTC 2019
On Fri, 2019-11-08 at 13:58 +0100, Andrea Bolognani wrote:
> On Fri, 2019-11-08 at 09:22 +0100, Erik Skultety wrote:
> > On Thu, Nov 07, 2019 at 07:51:57PM +0100, Andrea Bolognani wrote:
> > > Both CentOS and Fedora have had this enabled by default up until
> > > now, but that's no longer the case as of Fedora 31. Enabling it
> > > explicitly makes the first connection work as expected on the
> > > newer distributions without impacting the older ones negatively.
> >
> > Now that I read ^this, I'm wondering whether it wouldn't be worth also adding
> >
> > services --enabled sshd
> >
> > to the kickstart - I know, this is only useful with the workstation flavour
> > which comes with SSH daemon disabled, but I think it doesn't hurt to specify
> > this explicitly, especially in context of ansible, just my 2c.
>
> I wonder which specific component disables sshd for the Workstation
> flavor? Is there a chance the corresponding package is simply not
> installed in the first place?
Found it:
$ rpm -ql fedora-release-workstation-31-1.noarch
/usr/lib/os-release
/usr/lib/swidtag/fedoraproject.org/org.fedoraproject.Fedora-edition.swidtag
/usr/lib/systemd/system-preset/80-workstation.preset
/usr/share/glib-2.0/schemas/org.gnome.shell.gschema.override
/usr/share/polkit-1/rules.d/org.projectatomic.rpmostree1.rules
$ cat /usr/lib/systemd/system-preset/80-workstation.preset
#
# Fedora Workstation
#
# disable sshd socket by default on workstation
disable sshd.socket
# disable sshd service by default on workstation
disable sshd.service
# enable cups on-demand socket activation by default on workstation
# https://pagure.io/fedora-workstation/issue/8
enable cups.socket
enable cups.path
disable cups.service
So I would say we don't need to concern ourselves with it.
--
Andrea Bolognani / Red Hat / Virtualization
More information about the libvir-list
mailing list