From 7b56bf3085dcfc2f7800a2b221aa76f181edecfb Mon Sep 17 00:00:00 2001
From: sommerfeld <sommerfeld@sommerfeld.dev>
Date: Thu, 17 Sep 2026 15:05:37 +0100
Subject: Add SSH access to the Ubuntu packaging container

---
 private_dot_ssh/config.tmpl | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

(limited to 'private_dot_ssh/config.tmpl')

diff --git a/private_dot_ssh/config.tmpl b/private_dot_ssh/config.tmpl
index b6dce43..7bb6887 100644
--- a/private_dot_ssh/config.tmpl
+++ b/private_dot_ssh/config.tmpl
@@ -5,6 +5,19 @@ Host *
   ForwardAgent no
   ServerAliveInterval 120
 {{ else }}
+{{ if eq (default "host" (index . "machineRole")) "host" }}
+Host ubuntu-packaging
+  HostName ubuntu-packaging
+  User ubuntu
+  IdentityFile ~/.ssh/work.pub
+  IdentitiesOnly yes
+  ProxyCommand lxc exec ubuntu-packaging -T -- /usr/bin/nc 127.0.0.1 22
+  ForwardAgent no
+  ControlMaster no
+  ControlPath none
+
+Host *
+{{ end }}
 # Ensure KnownHosts are unreadable if leaked
 HashKnownHosts yes
 
@@ -18,6 +31,7 @@ IdentitiesOnly yes
 Host git.sommerfeld.dev
   Hostname mandibles.wg
 
+Host *
 Include work.config
 
 Match host * exec "gpg-connect-agent UPDATESTARTUPTTY /bye"
-- 
cgit v1.3.1