Add support for host key generation

1 files changed, 8 insertions, 0 deletions

diff --git a/init b/init
index 35838e5..83a4c27 100755
--- a/init
+++ b/init
@@ -383,6 +383,14 @@ o="nodev,noexec,nosuid,size=512M"
 o+=",mode=0755,uid=$(id -u build),gid=$(id -g build)"
 echo "tmpfs /build/tftp tmpfs $o 0 0" >>$fstab
 
+# Generate a host key. Used, for example, by the bbot agent to authenticate
+# with a controller.
+#
+mkdir -p /state/etc
+if [ ! -e /state/etc/host-key.pem ]; then
+  openssl genrsa 4096 >/state/etc/host-key.pem
+fi
+
 # Configure Postfix.
 #
 cat <<<"$hname" >/etc/mailname