From 81d0bebd5ea7746140596c2c6639bf0db9d2eea8 Mon Sep 17 00:00:00 2001
From: Justin Oros <JustinOros@gmail.com>
Date: Sun, 19 Apr 2026 21:58:29 -0700
Subject: [PATCH] setup-spoke.sh: write hub host key to root's known_hosts
 during keyscan to prevent host key prompt during tunnel test

---
 spoke/setup-spoke.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/spoke/setup-spoke.sh b/spoke/setup-spoke.sh
index a215533..af6e9b8 100755
--- a/spoke/setup-spoke.sh
+++ b/spoke/setup-spoke.sh
@@ -319,6 +319,12 @@ if [ -n "$HUB_KEYSCAN" ]; then
         if ! grep -qF "$KEYSCAN_KEY" "$SSH_DIR/known_hosts" 2>/dev/null; then
             echo "$KEYSCAN_LINE" >> "$SSH_DIR/known_hosts"
         fi
+        mkdir -p /root/.ssh
+        touch /root/.ssh/known_hosts
+        chmod 600 /root/.ssh/known_hosts
+        if ! grep -qF "$KEYSCAN_KEY" /root/.ssh/known_hosts 2>/dev/null; then
+            echo "$KEYSCAN_LINE" >> /root/.ssh/known_hosts
+        fi
     done <<< "$HUB_KEYSCAN"
 fi
 check_permissions "$SSH_DIR/known_hosts" "known_hosts"