google-compute-image: Remove fetch-ssh-keys.service #33004
Closed
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Nixops deployment to GCE fails when trying to receive ssh keys metadata:
A quick inspection of deployment from GCE console showed that ssh keys are attached as an instance metadata, but script tries to fetch global
project/attributes/sshKeys
which result in 404.SSHing and fetching
instance/attributes/sshKeys
succeeded (response body with ssh keys omitted)Testing done
Was able to successfully deploy to GCE using
-I nixpkgs
overrideUpdate 2017-12-29
After a thorough investigation, I found that
fetch-ssh-keys.service
duplicates thefetch-ssh-keys-start.service
and probably uses obsolete apis, so can be removed.related #24273
Testing
I was able to successfully deploy minimal working configuration with the
fetch-ssh-keys.service
disabled. Here is its journalctl boot log.