Use pki for ssh access

Author: valtzu

mkosi.conf

@@ -29,7 +29,6 @@ Format=disk
 SplitArtifacts=yes
 
 [Content]
-RootPassword=foobar
 Locale=en_US.UTF-8
 Keymap=fi
 Timezone=Europe/Helsinki

mkosi.extra/usr/lib/systemd/system-generators/import-ssh-public-key-from-eeprom

@@ -1,7 +1,12 @@
-#!/bin/bash -ex
+#!/bin/bash -e
 
 kver=$(basename $BUILDROOT/usr/lib/modules/*)
 if zcat -t $BUILDROOT/usr/lib/modules/$kver/vmlinuz ; then
   mv $BUILDROOT/usr/lib/modules/$kver/{vmlinuz,vmlinuz.gz}
   gzip -d $BUILDROOT/usr/lib/modules/$kver/vmlinuz.gz
 fi
+
+mkdir -pm 0700 /root/.ssh
+# todo: use $(jq -r '.SshKey' $MKOSI_CONFIG) instead of hardcoded mkosi.key once the fix is released https://github.com/systemd/mkosi/pull/2574
+ssh-keygen -f $SRCDIR/mkosi.key -y > /root/.ssh/authorized_keys
+chmod 0700 /root/.ssh/authorized_keys