[OE-core] [PATCH V2 10/10] openssh: make /etc/ssh directory writable in read-only rootfs

Burton, Ross ross.burton at intel.com
Mon Jul 29 15:59:30 UTC 2013


On 29 July 2013 03:33,  <Qi.Chen at windriver.com> wrote:
> From: Chen Qi <Qi.Chen at windriver.com>
>
> If the rootfs is read-only and the ssh keys are not available at system
> start-up, the init script will generate ssh keys into /etc/ssh, thus
> causing a 'read-only file system' error.
>
> Make this directory writable in case of a read-only rootfs.
> Note that if the ssh keys are pregenerated, they will not be lost,
> as there's a copying process before bind mounting.

I'm not very keen on the idea of every oe-core system having a tmpfs
on /etc/openssh just for read-only-root configurations where there
isn't a pre-generated key.

At least one better option would be to handle the read-only / with no
pre-generated keys situation in the init script, and write keys to
/run.

Ross



More information about the Openembedded-core mailing list