#!/bin/bash
# Generate SSH keypair for the test harness.
# Called during container startup if keys don't exist yet.
set -e

KEY_DIR="${1:-/ssh-keys}"
mkdir -p "$KEY_DIR"

if [ ! -f "$KEY_DIR/id_ed25519" ]; then
  ssh-keygen -t ed25519 -f "$KEY_DIR/id_ed25519" -N "" -q
  cat "$KEY_DIR/id_ed25519.pub" > "$KEY_DIR/authorized_keys"
  chmod 600 "$KEY_DIR/id_ed25519"
  chmod 644 "$KEY_DIR/id_ed25519.pub" "$KEY_DIR/authorized_keys"
  echo "SSH keys generated in $KEY_DIR"
else
  echo "SSH keys already exist in $KEY_DIR"
fi