summary refs log tree commit diff
path: root/nixos/doc
diff options
context:
space:
mode:
authorYegor Timoshenko <yegortimoshenko@riseup.net>2020-03-28 09:22:02 +0100
committerGitHub <noreply@github.com>2020-03-28 09:22:02 +0100
commit5626cb94867329529a4f1f0cad28c1aedfba01f9 (patch)
tree9ee53faa4e2f172071fbdd262f69ac7921ac3ad1 /nixos/doc
parent42d03aabbd346eafeb158993a83beb279bdad56c (diff)
parentd930466b7728e5515991cb73c060fc3f32bdc001 (diff)
downloadnixpkgs-5626cb94867329529a4f1f0cad28c1aedfba01f9.tar
nixpkgs-5626cb94867329529a4f1f0cad28c1aedfba01f9.tar.gz
nixpkgs-5626cb94867329529a4f1f0cad28c1aedfba01f9.tar.bz2
nixpkgs-5626cb94867329529a4f1f0cad28c1aedfba01f9.tar.lz
nixpkgs-5626cb94867329529a4f1f0cad28c1aedfba01f9.tar.xz
nixpkgs-5626cb94867329529a4f1f0cad28c1aedfba01f9.tar.zst
nixpkgs-5626cb94867329529a4f1f0cad28c1aedfba01f9.zip
Merge pull request #82603 from emilazy/nixos-initrd-openssh
nixos/initrd-ssh: switch from Dropbear to OpenSSH
Diffstat (limited to 'nixos/doc')
-rw-r--r--nixos/doc/manual/release-notes/rl-2009.xml17
1 files changed, 17 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2009.xml b/nixos/doc/manual/release-notes/rl-2009.xml
index a9a6003d1e8..85a7f9c9871 100644
--- a/nixos/doc/manual/release-notes/rl-2009.xml
+++ b/nixos/doc/manual/release-notes/rl-2009.xml
@@ -108,6 +108,23 @@
       <link linkend="opt-security.duosec.integrationKey">security.duosec.integrationKey</link>.
     </para>
    </listitem>
+   <listitem>
+    <para>
+     The initrd SSH support now uses OpenSSH rather than Dropbear to
+     allow the use of Ed25519 keys and other OpenSSH-specific
+     functionality. Host keys must now be in the OpenSSH format, and at
+     least one pre-generated key must be specified.
+    </para>
+    <para>
+     If you used the <option>boot.initrd.network.ssh.host*Key</option>
+     options, you'll get an error explaining how to convert your host
+     keys and migrate to the new
+     <option>boot.initrd.network.ssh.hostKeys</option> option.
+     Otherwise, if you don't have any host keys set, you'll need to
+     generate some; see the <option>hostKeys</option> option
+     documentation for instructions.
+    </para>
+   </listitem>
   </itemizedlist>
  </section>