Enhance security by ensuring unique SSH host keys for VMs and protecting registry credentials. Update documentation to reflect changes in SSH key management and improve state file permissions.

2026-09-04 21:31:54 +00:00
parent 1022f24c34
commit a8dbc704e9
7 changed files with 147 additions and 16 deletions
@@ -197,11 +197,11 @@ defaults are username `root` and password `root`. A custom image must provide:
 - `sshd`
 - `/etc/passwd`, `/etc/shadow`, and `/etc/ssh/sshd_config`
 - The requested user account; UVM does not create missing users
- Unique SSH host keys generated during first boot

 The known public demo key bundled in Firecracker's default bionic image is
-removed from each private disk. Never bake SSH host private keys into a rootfs
-template shared by multiple VMs.
+removed from each private disk. UVM also replaces the conventional RSA, ECDSA,
+and Ed25519 SSH host keys in every private disk so cloned VMs have distinct
+host identities. Never rely on SSH private keys baked into a shared template.

 ## Host Networking