forked from ungleich-public/cdist
		
	import __ssh_authorized_key from Aurélien's tree
Signed-off-by: Nico Schottelius <nico@kr.ethz.ch>
This commit is contained in:
		
					parent
					
						
							
								0e5cb9b11f
							
						
					
				
			
			
				commit
				
					
						4d244e9ea2
					
				
			
		
					 3 changed files with 103 additions and 0 deletions
				
			
		
							
								
								
									
										46
									
								
								conf/type/__ssh_authorized_key/man.text
									
										
									
									
									
										Normal file
									
								
							
							
						
						
									
										46
									
								
								conf/type/__ssh_authorized_key/man.text
									
										
									
									
									
										Normal file
									
								
							| 
						 | 
					@ -0,0 +1,46 @@
 | 
				
			||||||
 | 
					cdist-type__ssh_authorized_key(7)
 | 
				
			||||||
 | 
					=================================
 | 
				
			||||||
 | 
					Aurélien Bondis - aurelien.bondis AT gmail DOT com
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					NAME
 | 
				
			||||||
 | 
					----
 | 
				
			||||||
 | 
					cdist-type__ssh_authorized_key - Sends a user's public key to another user's authorized_keys
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					DESCRIPTION
 | 
				
			||||||
 | 
					-----------
 | 
				
			||||||
 | 
					This type sends a rsa key. By default uses root's key and sends it to root's authorized_keys
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					REQUIRED PARAMETERS
 | 
				
			||||||
 | 
					-------------------
 | 
				
			||||||
 | 
					None.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					OPTIONAL PARAMETERS
 | 
				
			||||||
 | 
					-------------------
 | 
				
			||||||
 | 
					srcuser:: the user to take the rsa public key from
 | 
				
			||||||
 | 
					dstuser:: the user to give the rsa public key to
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					EXAMPLES
 | 
				
			||||||
 | 
					--------
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					--------------------------------------------------------------------------------
 | 
				
			||||||
 | 
					#deploy root's public key
 | 
				
			||||||
 | 
					__ssh_authorized_key admin
 | 
				
			||||||
 | 
					#deploy bob's public key to alice's authorized_keys
 | 
				
			||||||
 | 
					__ssh_authorized_key --srcuser bob --dstuser alice
 | 
				
			||||||
 | 
					--------------------------------------------------------------------------------
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					SEE ALSO
 | 
				
			||||||
 | 
					--------
 | 
				
			||||||
 | 
					- cdist-type(7)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					COPYING
 | 
				
			||||||
 | 
					-------
 | 
				
			||||||
 | 
					Free use of this software is
 | 
				
			||||||
 | 
					granted under the terms of the GNU General Public License version 3 (GPLv3).
 | 
				
			||||||
							
								
								
									
										55
									
								
								conf/type/__ssh_authorized_key/manifest
									
										
									
									
									
										Executable file
									
								
							
							
						
						
									
										55
									
								
								conf/type/__ssh_authorized_key/manifest
									
										
									
									
									
										Executable file
									
								
							| 
						 | 
					@ -0,0 +1,55 @@
 | 
				
			||||||
 | 
					#!/bin/sh
 | 
				
			||||||
 | 
					#
 | 
				
			||||||
 | 
					# 2011 Aurélien Bondis  aurelien.bondis AT gmail DOT com
 | 
				
			||||||
 | 
					#
 | 
				
			||||||
 | 
					# This file is part of cdist.
 | 
				
			||||||
 | 
					#
 | 
				
			||||||
 | 
					# cdist is free software: you can redistribute it and/or modify
 | 
				
			||||||
 | 
					# it under the terms of the GNU General Public License as published by
 | 
				
			||||||
 | 
					# the Free Software Foundation, either version 3 of the License, or
 | 
				
			||||||
 | 
					# (at your option) any later version.
 | 
				
			||||||
 | 
					#
 | 
				
			||||||
 | 
					# cdist is distributed in the hope that it will be useful,
 | 
				
			||||||
 | 
					# but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
				
			||||||
 | 
					# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
				
			||||||
 | 
					# GNU General Public License for more details.
 | 
				
			||||||
 | 
					#
 | 
				
			||||||
 | 
					# You should have received a copy of the GNU General Public License
 | 
				
			||||||
 | 
					# along with cdist. If not, see <http://www.gnu.org/licenses/>.
 | 
				
			||||||
 | 
					#
 | 
				
			||||||
 | 
					#
 | 
				
			||||||
 | 
					# This type allows to send a public ssh key from a user to the
 | 
				
			||||||
 | 
					# authorized_keys of another
 | 
				
			||||||
 | 
					#
 | 
				
			||||||
 | 
					#require="__package openssh-server --state installed"
 | 
				
			||||||
 | 
					# Get option srcuser if defined
 | 
				
			||||||
 | 
					if [ -f "$__object/parameter/srcuser" ]; then
 | 
				
			||||||
 | 
					   srcuser=`cat "$__object/parameter/srcuser"`
 | 
				
			||||||
 | 
					fi
 | 
				
			||||||
 | 
					# Get option dstuser if defined
 | 
				
			||||||
 | 
					if [ -f "$__object/parameter/dstuser" ]; then
 | 
				
			||||||
 | 
					   dstuser=`cat "$__object/parameter/dstuser"`
 | 
				
			||||||
 | 
					fi
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					# if a source user is defined, use it's public key
 | 
				
			||||||
 | 
					if [ "$srcuser" ]; then
 | 
				
			||||||
 | 
					   srcrsa="/home/${srcuser}/.ssh/id_rsa.pub"
 | 
				
			||||||
 | 
					# if no source user is defined we use root's public key
 | 
				
			||||||
 | 
					else
 | 
				
			||||||
 | 
					   srcrsa="/root/.ssh/id_rsa.pub"
 | 
				
			||||||
 | 
					fi
 | 
				
			||||||
 | 
					# if a destination user is defined, insert in it's authorized_keys
 | 
				
			||||||
 | 
					if [ "$dstuser" ]; then
 | 
				
			||||||
 | 
					   sshpath="/home/$dstuser/.ssh"
 | 
				
			||||||
 | 
					# if no destination user is defined we use root's home
 | 
				
			||||||
 | 
					else
 | 
				
			||||||
 | 
					   sshpath="/root/.ssh"
 | 
				
			||||||
 | 
					fi
 | 
				
			||||||
 | 
					rsa=`cat $srcrsa`
 | 
				
			||||||
 | 
					__directory $sshpath
 | 
				
			||||||
 | 
					# the file authorized_keys depends on the .ssh folder
 | 
				
			||||||
 | 
					require="__directory${sshpath}" __file "$sshpath/authorized_keys" --mode 640
 | 
				
			||||||
 | 
					# the line added depends on authorized_keys existence
 | 
				
			||||||
 | 
					require="__file${sshpath}/authorized_keys" __addifnosuchline sshkey --file \
 | 
				
			||||||
 | 
					 "$sshpath/authorized_keys" --line "$rsa"
 | 
				
			||||||
 | 
					
 | 
				
			||||||
							
								
								
									
										2
									
								
								conf/type/__ssh_authorized_key/parameter/optional
									
										
									
									
									
										Normal file
									
								
							
							
						
						
									
										2
									
								
								conf/type/__ssh_authorized_key/parameter/optional
									
										
									
									
									
										Normal file
									
								
							| 
						 | 
					@ -0,0 +1,2 @@
 | 
				
			||||||
 | 
					srcuser
 | 
				
			||||||
 | 
					dstuser
 | 
				
			||||||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue