#!/usr/bin/env bash
set -Eeuo pipefail
umask 077

readonly MARKER="/var/lib/rk1-media/first-boot.pending"
[[ -e "${MARKER}" ]] || exit 0

rm -f /etc/ssh/ssh_host_*
ssh-keygen -A

found_key="no"
for private_key in /etc/ssh/ssh_host_*_key; do
	if [[ -s "${private_key}" ]]; then
		found_key="yes"
		break
	fi
done
[[ "${found_key}" == "yes" ]] || { echo "No SSH host key was generated" >&2; exit 1; }

/usr/sbin/sshd -t
rm -f "${MARKER}"
sync