Home / Projects / Orchestrata Ultimate / Decisions / ADR index / ADR-0082

ADR-0082: The mcp-server-test-ssh profile's embedded key stays unrotated

field	value
Status	Accepted — Accepted (Mohamed, 2026-10-09 — verbatim; see Provenance)
Date	2026-10-09
Register	factory (`docs/adr`, 4-digit ids)
Source	`docs/adr/0082-the-mcp-server-test-ssh-profiles-embedded-key-stays-unrotated.md` — permalink at `8d3be15f7` (unchanged on master since that commit)
Wiki register entry	ADR-0082 (wiki status: Accepted)

← ADR-0081 · ADR-0083 →

The record

Status: Accepted (Mohamed, 2026-10-09 — verbatim; see Provenance) · Date: 2026-10-09

Context

The Incus profile mcp-server-test-ssh (project default) embeds a base64-encoded OpenSSH private key (moe@mohamed-inspiron7573) in its user.user-data, written into every container booted from it. Verified 2026-10-09: no running container uses the profile, and the key is not in the host's authorized_keys — a dead credential in a template, not a live exposure.

Decision (Mohamed, verbatim)

"do not protect keys now, leeave this"

No rotation, no profile change, no provisioning-path work.

Alternatives rejected

Cut the key block / rotate to per-container keypairs: remediation cost against a credential that opens nothing used today.
Delete the whole profile: nothing references it; deletion is housekeeping, not security, and Mohamed declined the housekeeping too.

Consequences

The register item closes as ruled-declined; the exposure note stays recoverable here. If the MCP test flow ever boots from this profile again, the key question reopens by construction.

Provenance

Mohamed, 2026-10-09, in the Kimi Code session. First recorded in infra/README.md; this ADR is the recoverable home (ADR-0085's rule).

Also mentioned: ADR-0085

Rulings cited

None.

Specs cited

None (or no spec page exists for the ones named).