Use a fixed SSH host key #1

Closed
opened 2026-10-18 17:19:24 +01:00 by SethFalco · 0 comments
Owner

Right now we have SSH host checking disabled because the SSH host key on the VM changes on restart/reset.

This has two problems:

  1. It's less secure, which kinda defeats the point.
  2. The server agent sees warning once the SSH host key as rolled. Even though they aren't verified, the warning is still present.

I noticed while going through the SSH server config that we should be able to define an SSH host key ourselves. If so, we can generate out outside the VM and use a lima.yaml param to write it into the VM so that it persists across tear downs.

Right now we have SSH host checking disabled because the SSH host key on the VM changes on restart/reset. This has two problems: 1. It's less secure, which kinda defeats the point. 2. The server agent sees warning once the SSH host key as rolled. Even though they aren't verified, the warning is still present. I noticed while going through the SSH server config that we should be able to define an SSH host key ourselves. If so, we can generate out outside the VM and use a lima.yaml param to write it into the VM so that it persists across tear downs.
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
ai/agent-devenv#1
No description provided.