Jenkins agents need to have a pre-built cache of SSH public keys for any host jobs need to access. This file is typically bind-mounted into jobs' containers. For the older Fedora-based agent nodes, the `ssh_known_hosts` file is populated by Ansible. That mechanism will not work for agent nodes using the immutable root filesystem created by this project, so we need an alternative. To that end, the `fetch-ssh-knownhosts` service downloads the keys from another machine using HTTPS when the system boots up and then periodically while it is running. |
||
---|---|---|
.. | ||
dhcpcd/dhcpcd-hooks | ||
systemd | ||
tmpfiles.d |