Drift/issues
17
1
Issues 172 Wiki Activity

Stop salt from overwriting keys in /root/.ssh/authorized_keys #333

New Issue
Closed
opened 2026-01-31 14:18:56 +01:00 by oysteikt · 0 comments
oysteikt commented 2026-01-31 14:18:56 +01:00
Owner
Copy Link

Some of the machines with fresh new keys from the key generator script in https://git.pvv.ntnu.no/Drift/principal-backup-script/ are being overwritten by salt's nightly update. Either salt should distribute the right keys, or just stop altogether (the later is probably not a bad option, the keys being distributed are from dead machines - should've been removed a long time ago)

Some of the machines with fresh new keys from the key generator script in https://git.pvv.ntnu.no/Drift/principal-backup-script/ are being overwritten by salt's nightly update. Either salt should distribute the right keys, or just stop altogether (the later is probably not a bad option, the keys being distributed are from dead machines - should've been removed a long time ago)
oysteikt added the bugsecuritysaltbackupnetworking labels 2026-01-31 14:18:57 +01:00
oysteikt added this to the Kanban project 2026-01-31 14:18:57 +01:00
oysteikt moved this to High priority in Kanban on 2026-01-31 14:19:16 +01:00
oysteikt moved this to Done / Moved / Other in Kanban on 2026-02-13 09:53:30 +01:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
dns
Involves modifications to dvask
 exploration
See the galaxy!
 gitea
mail
epost nord
 new stuff
Adds a new service / new functionality
 openstack
NUTN OpenStack, more like closed stack
 services
Everything regarding selfhosted services
 software
Everything regarding homebrewn software
art
The issue needs someone to be creative
 backup
big
No, not bug, **big** - this is gonna take a while
 blocked
This issue/PR depends on one or more other issues/PRs
 bug
Something is not working, and it's not the shield hero
 crash report
Report an oopsie
 disputed
kranglefanter
 documentation
Documentation changes required
 duplicate
This issue or pull request already exists
 enhancement
New feature
 good first issue
Get your hands dirty with a new project here
 logging
networking
TTM4100
 nixos
Requires changes to our nixos setup
 question
More information is needed
 salt
Requires changes to our salt setup
 security
Skommel
 servers n' hardware
Regards hardware, servers or VMs
 wontfix
This won't be fixed
No Label backup bug networking salt security
Milestone
No items
No Milestone
Projects
Clear projects
No project Kanban
Assignees
Clear assignees
adriangl albertba alfhj bjornoka chrisfjo chrivi danio davidk dungby eirikwit felixalb frero jonmro jovre karolds knuta krisleri larshhan olived oysteikt pederbs root torsteno vegardbm yorinad
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Drift/issues#333
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?