fdi.ssh=1 enables root login & passwd auth

[stejskalleos]

Before:
Adding fdi.ssh=1 fdi.rootpw=changeme to kernel attributes will enable the sshd service, but it won't allow root login to authenticate.

Now
Adding fdi.ssh=1 will enable root login and password authentication for the root user.

Notes:
fdi.ssh=true doesn't work; the documentation is incorrect. See theforeman/foreman-documentation#4635

[evgeni]

How do I deploy a key into FDI?

[stejskalleos]

https://docs.theforeman.org/3.17/Provisioning_Hosts/index-foreman-el.html#Extending_the_Discovery_Image_provisioning

However, I'm not sure if anyone is doing that.

[evgeni]

TIL. Thanks

[evgeni]

Given both PubkeyAuthentication and PasswordAuthentication is yes by default, and there is no point in deleting comments, this could be:

sed -i '/^PermitRootLogin/d' /etc/ssh/sshd_config
echo 'PermitRootLogin yes' >> /etc/ssh/sshd_config

But I am fine if you want to explicitly set the others.

[stejskalleos]

But I am fine if you want to explicitly set the others.

I'd like to explicitly do that, it's clear what we do (and what we need) without looking for the default sshd_config file

[evgeni]

Suggested change

	sed -i "/^#\?${KEY}/d" "/etc/ssh/sshd_config"
	sed -i "/^${KEY}/d" "/etc/ssh/sshd_config"

We don't need to delete comments.