From fd5242392c767753e4be1b9bd9796f6548e0263f Mon Sep 17 00:00:00 2001
From: Paul Whalen <pwhalen@fedoraproject.org>
Date: Feb 26 2026 20:05:07 +0000
Subject: fix: drop sshd-authorized-keys workaround


Openssh config snippet now shipped with ignition.

See: https://src.fedoraproject.org/rpms/ignition/pull-request/143

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>

---

diff --git a/fedora-iot-base.yaml b/fedora-iot-base.yaml
index 857b4de..6004dc7 100644
--- a/fedora-iot-base.yaml
+++ b/fedora-iot-base.yaml
@@ -4,8 +4,6 @@ include:
   - composefs.yaml
   # Read only sysroot
   - sysroot-ro.yaml
-  # SSH authorized keys configuration for Ignition
-  - sshd-authorized-keys.yaml
 ref: fedora/devel/${basearch}/iot
 repos: []
 selinux: true
diff --git a/sshd-authorized-keys.yaml b/sshd-authorized-keys.yaml
deleted file mode 100644
index 4080a64..0000000
--- a/sshd-authorized-keys.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-# Configuration to have OpenSSH read authorized keys from files in
-# ~/.ssh/authorized_keys.d/* in addition to ~/.ssh/authorized_keys
-# This enables Ignition to write keys to authorized_keys.d/ignition
-#
-# Replaces the deprecated ssh-key-dir package
-# See: https://github.com/coreos/ssh-key-dir/issues/188
-# See: https://github.com/coreos/fedora-coreos-config/pull/3885
-
-postprocess:
-  - |
-    #!/usr/bin/env bash
-    set -xeuo pipefail
-
-    # Configure sshd to read keys from authorized_keys.d directory
-    cat > /etc/ssh/sshd_config.d/90-authorized-keys-file.conf << 'EOF'
-    # Also accept keys configured by Ignition and Afterburn
-    AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys.d/*
-    EOF