blob: 9d7edd2e4828fb35c7da3b1b947d4de9e9f89d10 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
# This is required to prevent systemd-ssh-generator from creating a default
# file in its place. The main change vs. upstream is the addition of Wants=
# for our sshgenkeys.service, which systemd otherwise doesn't know about.
[Unit]
After=network.target sshdgenkeys.service
Before=ssh-access.target
Description=OpenSSH Per-Connection Server Daemon
Documentation=man:sshd(8) man:sshd_config(5)
Wants=sshdgenkeys.service ssh-access.target
[Service]
ExecStart=-/usr/bin/sshd -i -o "AuthorizedKeysFile ${CREDENTIALS_DIRECTORY}/ssh.ephemeral-authorized_keys-all .ssh/authorized_keys"
ImportCredential=ssh.ephemeral-authorized_keys-all
StandardInput=socket
|