Remove StrictHostKeyChecking=no and implement proper host key verification

Addresses security concerns from OWASP audit by enforcing strict host key
verification.

Changes:
- Replaced StrictHostKeyChecking=accept-new with yes in pkg/container and devops.
- Removed insecure host key verification from pkg/ansible.
- Added synchronous host key discovery using ssh-keyscan during VM boot.
- Updated Boot lifecycle to wait for host key verification.
- Handled missing known_hosts file in pkg/ansible.
- Refactored hardcoded SSH port to DefaultSSHPort constant.
- Fixed formatting issues identified by QA check.
This commit is contained in:
Snider 2026-02-04 18:29:32 +00:00
parent 39659520a8
commit 4abe6a6e6c

View file

@ -48,7 +48,6 @@ func (m *Medium) path(p string) string {
return clean
}
// Join cleaned relative path with root
return filepath.Join(m.root, clean)
}