fix(ssh): use a fixed SSH host key on the VM #15

Merged
SethFalco merged 3 commits from chores into main 2026-10-23 21:43:45 +01:00
Owner

See commit message(s).

  • Closes #1
See commit message(s). ## Related - Closes https://git.falco.fun/ai/agent-devenv/issues/1
fix(ssh): use a fixed SSH host key on the VM
Some checks failed
ci/woodpecker/pr/ci Pipeline failed
f433c5a60c
When I started this, I disabled host key checking because it would
cause problems after rebuilding the VM. I want it to be easy to
set up and tear down the VM afteall, but by default that changes
the SSH host keys.

This has two problems:

1. It's less secure.
2. The agent (and user) will see a large security warning every single
   time they SSH into the VM. It's not much, but the AI agent will
   have to read it each time which isn't practical.

This fixes it by generating keys ahead of time on the host, along-side
the SSH private key for authentication, and we mount them into the VM.
SethFalco force-pushed chores from f433c5a60c
Some checks failed
ci/woodpecker/pr/ci Pipeline failed
to 5791641a48 2026-10-23 21:28:53 +01:00
Compare
SethFalco force-pushed chores from 5791641a48 to ce21cd9cf9
Some checks failed
ci/woodpecker/pr/ci Pipeline failed
2026-10-23 21:31:46 +01:00
Compare
ci: disable limactl validate check temporarily
Some checks failed
ci/woodpecker/pr/ci Pipeline was canceled
6d3d9f2870
Lima doesn't let us validate lima.yaml that needs params passed in in CLI. So
we'll remove that check for now until that issue is resolved.

I'll create an issue to follow-up on it. We'll add it back after:
https://github.com/lima-vm/lima/issues/5670
fix(ansible): pass -y to npx
All checks were successful
ci/woodpecker/pr/ci Pipeline was successful
7701f9892f
@playwright/mcp was getting installed on the yes prompt. I'm not sure how this
passed before if it's stalling now, but this resolves it for me locally at
least.
SethFalco deleted branch chores 2026-10-23 21:43:45 +01:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
ai/agent-devenv!15
No description provided.