[Unit]
Description = Endofossil Test: Clone over SSH using fresh identity

[Service]
Type = oneshot
PrivateUsers = yes
DynamicUser = yes
User = fossil-test-user-%i
RuntimeDirectory = fossil-test-%i
BindPaths = /run/fossil-test-%i:/root/.ssh
Environment = HOME=/root FOSSIL_HOME=/root/.ssh

ExecStart = fakeroot sh -exc '\
cd; \
! touch /test.file 2>/dev/null; \
mountpoint -q .ssh || ln -s . .ssh; \
mkdir .ssh/known_hosts.d; \
ssh-keygen -t ed25519 -f .ssh/id_ed25519 -N ""; \
ssh -o BatchMode=yes -o StrictHostKeyChecking=accept-new -- %i@localhost :; \
ssh -o BatchMode=yes -o StrictHostKeyChecking=yes        -- %i@localhost uptime; \
cd .ssh; \
fossil clone ssh://%i@localhost/a/b/c/fossil-test-instance-2 db~$(date -Ins).fossil; \
'
ExecStartPost = +runuser -u '%i' -- sh -exc '\
cd; \
cd src; \
rm -f a/b/c/fossil-test-instance-2.fossil a/b/c/.fossil-remotes/*/fossil-test-instance-2.*; \
rmdir -p a/b/c/.fossil-remotes/* 2>/dev/null ; \
'