-
-
Notifications
You must be signed in to change notification settings - Fork 7
Open
Labels
Description
There are concerns about security keys generated during the CI process and so considered insecure.
And while Vagrant is considered as a solution for demo purposes, OVA could be used in prod environments.
The following needs to be auto-generated on first VM boot:
- SSH host keys (see related https://github.com/StackStorm/ova/issues/21)
Stanleyprivate SSH key & take care of Authorized key- SSL certificate used for nginx/st2web
Solution would be systemd configs which rely on ssh/nginx services (runs as "before" dependency) and creates keys/certs if they're not there already.
This will ensure that SSH/SSL secrets are unique and not the same across all the users after our Packer builds.
Apart of that #17, - need to document as insecure:
vagrantLinux user with defaultvagrantpasswordvagrantLinux user with default/known Hashicorp SSH private key