From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 68F15C7115B for ; Mon, 23 Jun 2025 14:16:17 +0000 (UTC) Received: from list by lists.xenproject.org with outflank-mailman.1022501.1398334 (Exim 4.92) (envelope-from ) id 1uThxk-0002O8-MO; Mon, 23 Jun 2025 14:15:56 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1022501.1398334; Mon, 23 Jun 2025 14:15:56 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1uThxk-0002O1-It; Mon, 23 Jun 2025 14:15:56 +0000 Received: by outflank-mailman (input) for mailman id 1022501; Mon, 23 Jun 2025 14:15:55 +0000 Received: from se1-gles-flk1-in.inumbo.com ([94.247.172.50] helo=se1-gles-flk1.inumbo.com) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1uThxj-0002Nv-8U for xen-devel@lists.xenproject.org; Mon, 23 Jun 2025 14:15:55 +0000 Received: from fout-a3-smtp.messagingengine.com (fout-a3-smtp.messagingengine.com [103.168.172.146]) by se1-gles-flk1.inumbo.com (Halon) with ESMTPS id 91d6d1ad-503c-11f0-b894-0df219b8e170; Mon, 23 Jun 2025 16:15:53 +0200 (CEST) Received: from phl-compute-04.internal (phl-compute-04.phl.internal [10.202.2.44]) by mailfout.phl.internal (Postfix) with ESMTP id DF9B8138043D; Mon, 23 Jun 2025 10:15:51 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-04.internal (MEProxy); Mon, 23 Jun 2025 10:15:51 -0400 Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 23 Jun 2025 10:15:50 -0400 (EDT) X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" X-Inumbo-ID: 91d6d1ad-503c-11f0-b894-0df219b8e170 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= invisiblethingslab.com; h=cc:cc:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1750688151; x=1750774551; bh=qns6fN0fK2/ObDf94R9rZadp1F7Ip6+JKqr5aJYdcLI=; b= SoX0/KcxUtYaw5awb6WvtnB8AVkbFKj5nVrrkw4x1jiP17kkNxlcIWIs8D9vMHjI WBvAumUxTdI7Od/sEr9JzgLjiSqbOzdAq/4J03KDpSb/SyuTpFyDII7yvOTsS/Yv 7IWDzAof6nWR0K6B+SmlEAgDD+5wGmDh0Yq7vXuyBXhTDF8eA9+l2ulTLNjkvlTv v+V9JjApebVJB5DUWnc1RQK+BeLvuRzj8J3p+MYWrO+IXd4yxvtJh26BpvjaQUFj QfIQ1x6VfobwWHN64b3qaUKLvJs2/D/B5ryVyTAkjSUt0f8bQ1h0ltpKLBu/RtKa JwijIq9fSosTV1ZREUamFA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t= 1750688151; x=1750774551; bh=qns6fN0fK2/ObDf94R9rZadp1F7Ip6+JKqr 5aJYdcLI=; b=S72KPoEOTCqVsgwB6+VuJCxZV1easrN52HpCeL7m5JSXpi4KVVi xv6Qb7OV41zxKm5PPHAJ19TvazYKCQre/AH0VksP8Mk3TI3VRcr9dgE3VMWDrdi8 W3MLTy0GajBvtAgVemOAwQAGtohD+tR22X5z8D5hgIVDcYKK/NmL0j0wDq0sDP+m b7MdXjwncke88ayHyz8tsZSev8L+fU2hf5bH37WesbkagWaAj1m/DOzGFKhDNxgQ 3K0P2wEONBiHQNvcbyBhUtyBJ/iu/GenYamt/VhcBaTD6/LEgUVCrEfa/9SS/2PL 2v4YCVnYlapFP4G877CZIriKgnhmGzWEEJQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeffedrtddvgddujedvgecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpuffrtefokffrpgfnqfghnecuuegr ihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjug hrpeffhffvvefukfhfgggtuggjsehgtderredttdejnecuhfhrohhmpeforghrvghkucfo rghrtgiihihkohifshhkihdqifpkrhgvtghkihcuoehmrghrmhgrrhgvkhesihhnvhhish hisghlvghthhhinhhgshhlrggsrdgtohhmqeenucggtffrrghtthgvrhhnpefgudelteef vefhfeehieetleeihfejhfeludevteetkeevtedtvdegueetfeejudenucevlhhushhtvg hrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehmrghrmhgrrhgvkhesihhn vhhishhisghlvghthhhinhhgshhlrggsrdgtohhmpdhnsggprhgtphhtthhopeegpdhmoh guvgepshhmthhpohhuthdprhgtphhtthhopegrnhgurhgvfidrtghoohhpvghrfeestghi thhrihigrdgtohhmpdhrtghpthhtohepgigvnhdquggvvhgvlheslhhishhtshdrgigvnh hprhhojhgvtghtrdhorhhgpdhrtghpthhtohepshhsthgrsggvlhhlihhniheskhgvrhhn vghlrdhorhhgpdhrtghpthhtoheprhhoghgvrhdrphgruhestghithhrihigrdgtohhm X-ME-Proxy: Feedback-ID: i1568416f:Fastmail Date: Mon, 23 Jun 2025 16:15:48 +0200 From: Marek =?utf-8?Q?Marczykowski-G=C3=B3recki?= To: Andrew Cooper Cc: xen-devel@lists.xenproject.org, Stefano Stabellini , Roger Pau =?utf-8?B?TW9ubsOp?= Subject: Re: [PATCH test-artifacts v1 5/5] Setup ssh access to test systems Message-ID: References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="mfA8UifdhOeM+qRB" Content-Disposition: inline In-Reply-To: --mfA8UifdhOeM+qRB Content-Type: text/plain; protected-headers=v1; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Date: Mon, 23 Jun 2025 16:15:48 +0200 From: Marek =?utf-8?Q?Marczykowski-G=C3=B3recki?= To: Andrew Cooper Cc: xen-devel@lists.xenproject.org, Stefano Stabellini , Roger Pau =?utf-8?B?TW9ubsOp?= Subject: Re: [PATCH test-artifacts v1 5/5] Setup ssh access to test systems On Mon, Jun 23, 2025 at 02:56:00PM +0100, Andrew Cooper wrote: > On 23/06/2025 2:46 pm, Marek Marczykowski-G=C3=B3recki wrote: > > For this add also bridge package, so xenbr0 can be configured with > > /etc/network/interfaces. > > This allows extracting more logs out of the test system. > > > > Signed-off-by: Marek Marczykowski-G=C3=B3recki > > --- > > This enables passwordless root login. It's okay for qubes runners, as > > they are isolated (even from each other). Is that okay in other places > > too? >=20 > It's potentially a problem on a corporate network. >=20 > Can't we have each job generate a random password an insert it via the > dom0-rootfs overlay? >=20 > Or alternatively have the runner drop a public key in > /root/.ssh/authorised_keys ? That can work, yes. And is preferred to a password, as easier to do non-interactively. --=20 Best Regards, Marek Marczykowski-G=C3=B3recki Invisible Things Lab --mfA8UifdhOeM+qRB Content-Type: application/pgp-signature; name=signature.asc -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAmhZYZQACgkQ24/THMrX 1yyAOwgAlIdXdb5K+YCy3hIBc9JQ8vPnGKTBcB9MvCH+IjOwj+zU/pE4UgmCgGJ6 ONBDnfHLaDpYGsRzJiimOvwlhRUFxxy4Lx3UlgEPFVYO2lNDSaiOAKaOar+e8CWK ZpxsQ0OR807hN7KmMiqaHRBh28Epj5bH8VsCC1YzTmz0izOo4rUY7RNtV3fxenEd G+x3Y11UaqWylO9YLG5xO1CecSlGT33hrQWJ9PpCydLG/oNxvgDVLCm4n/tn7TWe F3xA2cCju7GWIM2Vzkdv8ohOsgsvGy0TECHx/JqThT3Zc1a0pLEUEYY9oqMx9ACp bfJxDa408b5yf8F8RBTHD2uoyWekIA== =9GN4 -----END PGP SIGNATURE----- --mfA8UifdhOeM+qRB--