Re: [OE-Core][PATCH 1/6] openssh: Move sshdgenkeys.service to sshd.socket

["Khem Raj" <raj.khem@gmail.com>]

[-- Attachment #1.1: Type: text/plain, Size: 1166 bytes --]



On 4/23/20 10:14 AM, Andre McCurdy wrote:
> On Thu, Apr 23, 2020 at 1:30 AM Alex Kiernan <alex.kiernan@gmail.com> wrote:
>> On Wed, Apr 22, 2020 at 7:48 PM Andre McCurdy <armccurdy@gmail.com> wrote:
>>> On Wed, Apr 22, 2020 at 6:52 AM Alex Kiernan <alex.kiernan@gmail.com> wrote:
>>>>
>>>> sshd.socket launches the templated sshd@.service, so by moving the
>>>> sshdgenkeys.service to sshd.socket, key generation can start in advance
>>>> of a connection.
>>>
>>> Is deferring key generation until the first connection a bug or by design?
>>
>> If you've installed it, presumably you're expecting connections. But I
>> agree you could argue it either way.
> 
> The trade off is between slower first boot (or every boot for
> read-only rootfs if host keys are not persistent) -vs- slower first
> incoming ssh connection.
> 
> Since the first incoming ssh connection may never happen (especially
> if ssh is only used for debugging or development), optimising it at
> the expense of boot time doesn't seem to be an obvious improvement.
> 

I tend to agree. Perhaps it could be covered under read-only-rootfs
DISTRO_FEATURE

> 
> 
> 


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 201 bytes --]