build: refuse to bake mother SSH key into release images #113

Merged
clawdie merged 1 commit from build/mother-ssh-key into main 2026-06-22 09:49:18 +02:00

View file

@ -1615,6 +1615,8 @@ EOF
# manual key exchange. Public key is already in mother authorized_keys.
_mother_key_src="/home/clawdie/.ssh/osa-mother-2026"
if [ -f "${_mother_key_src}" ]; then
[ "${BUILD_CHANNEL}" = "release" ] && { echo "ERROR: refusing to bake mother SSH key into a release image"; exit 1; }
mkdir -p "${MOUNT_POINT}/home/clawdie/.ssh"
cp "${_mother_key_src}" "${MOUNT_POINT}/home/clawdie/.ssh/osa-mother-2026"
chmod 0600 "${MOUNT_POINT}/home/clawdie/.ssh/osa-mother-2026"