use ssh_config instead of ssh-keyscan

naps-product-sa · May 1, 2024 · eb01817 · eb01817
1 parent fee56c9
commit eb01817
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/cloudformation.yaml b/cloudformation.yaml
@@ -673,10 +673,12 @@ Resources:
           curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o /tmp/awscliv2.zip
           unzip -q -d /tmp /tmp/awscliv2.zip && rm -f /tmp/awscliv2.zip && /tmp/aws/install && rm -rf /tmp/aws
 
-          # scan for other SSH hosts
-          ssh-keyscan highside ${HighSideInstance.PrivateDnsName}  >> /etc/ssh/ssh_known_hosts
-          ssh-keyscan salsa-registry ${SalsaImageRegistryInstance.PrivateDnsName} >> /etc/ssh/ssh_known_hosts
-          ssh-keyscan nat ${NatInstance.PrivateDnsName} >> /etc/ssh/ssh_known_hosts
+          # Disable the "do you trust this SSH host" messages
+          cat << EOF >> /home/lab-user/.ssh/config
+          Host *
+            StrictHostKeyChecking false
+          EOF
+          chown -v lab-user:lab-user /home/lab-user/.ssh/config
 
           # Setup VNC
           yum -y install "@GNOME" firefox tigervnc-server