EC2: disable strict host checking for SSH

It's safe to assume the first connection to the host returned by EC2 is safe, since noone will really check if IP is withing amazon IP ranges cc @edolstra @rbvermaa
NixOS · Dec 6, 2016 · b104025 · b104025 · edolstra · Dec 6, 2016
1 parent 69e608a
commit b104025
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/nixops/backends/ec2.py b/nixops/backends/ec2.py
@@ -182,7 +182,7 @@ def get_ssh_private_key_file(self):
     def get_ssh_flags(self, *args, **kwargs):
         file = self.get_ssh_private_key_file()
         super_flags = super(EC2State, self).get_ssh_flags(*args, **kwargs)
-        return super_flags + (["-i", file] if file else [])
+        return super_flags + ["-o", "StrictHostKeyChecking=no"] + (["-i", file] if file else [])
 
     def get_physical_spec(self):
         block_device_mapping = {}