Skip to content

Better solution to host key verification issue than StrictHostKeyChecking=no - #79

Merged
EvanK merged 1 commit into
masterfrom
79-file-sync-on-host
Aug 17, 2015
Merged

EvanK merged 1 commit into
masterfrom
79-file-sync-on-host

Conversation

@EvanK

@EvanK EvanK commented Aug 12, 2015

Copy link
Copy Markdown
Contributor

See fix in #75

Rather than disable host key checking altogether and expose the vagrant guest to a possible MITM, the ideal solution would be (immediately before rsync):

  • check whether remote is in guest's known_hosts
  • if not, interactively prompt user to add known host (with hostname, ip, and ssh fingerprint)

Alternatively, we could grab contents of the host machine's known_hosts file and append it to the guest's

@EvanK

EvanK commented Aug 12, 2015

Copy link
Copy Markdown
Contributor Author

Since Genesis did file syncing on the host machine, and I don't particularly remember why we moved it to the vagrant guest for Evo, the simplest solution was to just move it back to the host.

This also removes the necessity for a running vm just to sync files, and will help with planned efforts for some sort of automated mass backup tools in the future

EvanK added a commit that referenced this pull request Aug 17, 2015
Better solution to host key verification issue than `StrictHostKeyChecking=no`
@EvanK
EvanK merged commit 7c60526 into master Aug 17, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant