From cc5fc9924230b6bb53af21c248025d2a4c49cf6e Mon Sep 17 00:00:00 2001
From: jtricerolph <info@tricerolph.com>
Date: Tue, 14 Jul 2026 09:38:56 +0000
Subject: [PATCH] =?UTF-8?q?Fix=20SSH=20known=5Fhosts=20noise=20=E2=80=94?=
 =?UTF-8?q?=20add=20UserKnownHostsFile=3D/dev/null=20to=20all=20SSH=20call?=
 =?UTF-8?q?s?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

/root/.ssh is mounted read-only in the management container, causing stderr
noise on every SSH connection. Routing to /dev/null avoids the write attempt.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 updater/src/index.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/updater/src/index.js b/updater/src/index.js
index 8a534be..d13726e 100644
--- a/updater/src/index.js
+++ b/updater/src/index.js
@@ -111,6 +111,7 @@ async function sshGet(host, cmdArgs) {
     const { stdout } = await spawnAsync('ssh', [
       '-i', SSH_KEY,
       '-o', 'StrictHostKeyChecking=no',
+      '-o', 'UserKnownHostsFile=/dev/null',
       '-o', 'ConnectTimeout=2',
       `root@${host}`,
       ...cmdArgs,
@@ -126,6 +127,7 @@ async function sshExec(host, command) {
     const child = spawn('ssh', [
       '-i', SSH_KEY,
       '-o', 'StrictHostKeyChecking=no',
+      '-o', 'UserKnownHostsFile=/dev/null',
       '-o', 'ConnectTimeout=5',
       `root@${host}`,
       'sh', '-c', command,
@@ -202,6 +204,7 @@ async function deploy(target, repoName) {
     const { stdout } = await spawnAsync('ssh', [
       '-i', SSH_KEY,
       '-o', 'StrictHostKeyChecking=no',
+      '-o', 'UserKnownHostsFile=/dev/null',
       `root@${target.host}`,
       'sh', '-c', remoteCmd,
     ], { timeout: 300_000 })