SSH host key maintenance, local provider

Stuart Bishop stuart.bishop at canonical.com
Fri Oct 3 14:19:51 UTC 2014


On 3 October 2014 20:23, Curtis Hovey-Canonical <curtis at canonical.com> wrote:
> On Fri, Oct 3, 2014 at 8:30 AM, Simon Davy <bloodearnest at gmail.com> wrote:
>> On 3 October 2014 13:21, Simon Davy <bloodearnest at gmail.com> wrote:
>>> This is what I have:
>>>
>>> Host 10.0.3.*
>>>     StrictHostKeyChecking no
>>>     UserKnownHostsFile /dev/null
>>>     ForwardAgent yes
>>>     LogLevel ERROR
> ....
>
> Juju-CI is in several clouds. We treat the 10.* and 172.* networks as
> ephemeral for our tests. Hp's machines on the 15.125.* are ephemeral.
> I haven't seen enough azure and joyent IP to also ignore them.
>
> Host 10.*.*.* 172.*.*.* ec2-*.compute-*.amazonaws.com 15.125.*.*
>   StrictHostKeyChecking no
>   UserKnownHostsFile /dev/null

Alas StrictHostKeyChecking seems the norm, which I can't use as it
turns off port forwarding. But that UserKnownHostsFile looks
promising...

-- 
Stuart Bishop <stuart.bishop at canonical.com>



More information about the Juju mailing list