mrcharles
6d77775bd6
secharden-ssh intentionally replaces authorized_keys with the managed production key set, which locks out the bootstrap/dev key the validation harness uses to drive the VM. After the first deploy that reaches SSH hardening, the harness could no longer connect to fetch logs or run the test suite, breaking the iteration loop. Add restore_vm_access(): after each deploy, if SSH is unreachable, it re-injects the validation pubkey OUT OF BAND via the Proxmox guest agent (qm guest exec runs as root inside the VM and does not depend on SSH). The injected payload is prefixed with a newline to avoid key concatenation when the managed file lacks a trailing newline. Config: ACCESS_PUBKEY (default ~/.ssh/id_ed25519.pub), RESTORE_ACCESS=1. Disable with RESTORE_ACCESS=0. 🤖 Generated with [Crush](https://github.com/charmassociates/crush) Assisted-by: GLM-5 via Crush <crush@charm.land>
KNEL FetchApply
Repo Issues
https://projects.knownelement.com/project/reachableceo-vptechnicaloperations/timeline
Repo Discussion
https://community.turnsys.com/c/chieftechnologyandproductofficer/26
Repo discription
Known Element Enterprises (the entity serving as the TSYS Group management company) (through it’s executive leader, the COO) provides core IT/back office systems/services/support on a hands off/fully delegated authortity basis to the CCO and the orgs/members.
One of those functions is the provisoning of Linux servers. This repository is the Infrastructure As Code (IAC) repository for TSYS.
In the future it will be used via FetchApply https://github.com/P5vc/fetch-apply
Usage
git clone this repo cd FetchApply/ProjectCode bash SetupNewSystem.sh