anchor.diff:            ${pkgs.openssh}/bin/ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key.pub > /dev/console
             echo "-----END SSH HOST KEY FINGERPRINTS-----" > /dev/console
           '';
  +      serviceConfig.Type = "oneshot";
  +      serviceConfig.RemainAfterExit = true;
       };
   
  -  # Only start sshd after we've obtained the host key (if given in the
  -  # user data), otherwise the sshd job will generate one itself.
  -  jobs.sshd.startOn = mkOverride 90 "stopped fetch-ec2-data";
  -
   }
  
positive.code: 
  {
  
    jobs.fetchEC2Data =
      { name = "fetch-ec2-data";
  
        startOn = "ip-up";
  
        task = true;
  
        path = [ pkgs.curl pkgs.iproute ];
  
        script =
          ''
            ip route del blackhole 169.254.169.254/32 || true
            
            curl="curl --retry 3 --retry-delay 0 --fail"
          
            echo "setting host name..."
            ${optionalString (config.networking.hostName == "") ''
              ${pkgs.nettools}/bin/hostname $($curl http://169.254.169.254/1.0/meta-data/hostname)
  
negative.code:           # accessed from now on.
            ip route add blackhole 169.254.169.254/32
          '';
  
        serviceConfig.Type = "oneshot";
        serviceConfig.RemainAfterExit = true;
      };
  
    boot.systemd.services."print-host-key" =
      { description = "Print SSH Host Key";
        wantedBy = [ "multi-user.target" ];
        after = [ "sshd.service" ];
        script =
          ''
            # Print the host public key on the console so that the user
  