--root-ssh-authorized-keys not work on the firstboot

[shi2wei3]

First boot:

# systemctl status systemd-tmpfiles-setup.service
● systemd-tmpfiles-setup.service - Create Volatile Files and Directories
     Loaded: loaded (/usr/lib/systemd/system/systemd-tmpfiles-setup.service; static)
     Active: active (exited) since Thu 2024-02-22 14:51:03 UTC; 2min 21s ago
       Docs: man:tmpfiles.d(5)
             man:systemd-tmpfiles(8)
    Process: 567 ExecStart=systemd-tmpfiles --create --remove --boot --exclude-prefix=/dev (code=exited, status=73)
   Main PID: 567 (code=exited, status=73)
        CPU: 162ms

Feb 22 14:51:03 localhost systemd[1]: Starting Create Volatile Files and Directories...
Feb 22 14:51:03 localhost systemd-tmpfiles[567]: "/root" already exists and is not a directory.
Feb 22 14:51:03 localhost systemd-tmpfiles[567]: Failed to open path '/root', ignoring: No such file or directory
Feb 22 14:51:03 localhost systemd-tmpfiles[567]: Failed to open path '/root/.ssh': No such file or directory
Feb 22 14:51:03 localhost systemd-tmpfiles[567]: "/home" already exists and is not a directory.
Feb 22 14:51:03 localhost systemd-tmpfiles[567]: "/srv" already exists and is not a directory.
Feb 22 14:51:03 localhost systemd[1]: Finished Create Volatile Files and Directories.

# ls -a /etc/tmpfiles.d/bootc-root-ssh.conf
/etc/tmpfiles.d/bootc-root-ssh.conf
# ls -a /root/
.  ..  .lesshst

Second boot:

# ls -a /root/
.  ..  .bash_history  .lesshst  .ssh

[cgwalters]

OK yeah I think the main failure may start from here

Feb 22 14:51:03 localhost systemd-tmpfiles[567]: "/root" already exists and is not a directory.

Possible fixes:

• Create more directories in /var in base image CentOS/centos-bootc#354
• sed -ie s,/root,/var/roothome, /usr/lib/tmpfiles.d/provision.conf in our base images
• Changing systemd to support following symlinks for some tmpfiles

[shi2wei3]

I can still see the error messages on first boot, but it's different from the original error messages since it won't tell us /root is not found.

Mar 04 06:46:30 localhost systemd-tmpfiles[562]: /usr/lib/tmpfiles.d/rpm-ostree-0-integration.conf:3: Duplicate line for path "/var/roothome", ignoring.
Mar 04 06:46:30 localhost systemd-tmpfiles[562]: Failed to open path '/root/.ssh': No such file or directory
Mar 04 06:46:30 localhost systemd-tmpfiles[562]: "/home" already exists and is not a directory.
Mar 04 06:46:30 localhost systemd-tmpfiles[562]: "/srv" already exists and is not a directory.

[cgwalters]

Thanks hmm...I thought this was working for me, but yes, let's add an e2e CI test that is gating on this working (cc #373 )

[mvo5]

I opened CentOS/centos-bootc#440 - I hope this fixes it (did not do an end-to-end test, sorry!). I want to use the --root-ssh-authorized-keys to test osbuild/images#462 :)

[mvo5]

This may need a final tweak #407 - I still saw an issue when testing this but it seems the linked PR fixes it for me (but maybe there is a better way or I am missing something?)