From fbd3ea54962e7b0348c9ccb4471f493c26002322 Mon Sep 17 00:00:00 2001
From: June <june@jsts.xyz>
Date: Wed, 7 Jan 2026 18:09:48 +0100
Subject: [PATCH] base_config: disable cloud-init ssh module to avoid hostkey
 regeneration

It should run once on first boot anyway and since it apparently runs for
every change in the Proxmox cloud init config, disable it, so it
doesn't, since it's annoying to have "random" hostkey changes.
---
 roles/base_config/tasks/main.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 roles/base_config/tasks/main.yaml

diff --git a/roles/base_config/tasks/main.yaml b/roles/base_config/tasks/main.yaml
new file mode 100644
index 0000000..cd8affd
--- /dev/null
+++ b/roles/base_config/tasks/main.yaml
@@ -0,0 +1,13 @@
+# Ensure the ssh module is disabled, so a cloud-init config change doesn't regenerate the host keys for no reason.
+- name: check if cloud-init config file exists
+  ansible.builtin.stat:
+    path: /etc/cloud/cloud.cfg
+  register: base_config__stat_cloud_cfg
+
+- name: ensure the cloud-init ssh module is disabled
+  ansible.builtin.replace:
+    path: /etc/cloud/cloud.cfg
+    regexp: " - ssh$"
+    replace: " #- ssh"
+  become: true
+  when: base_config__stat_cloud_cfg.stat.exists