mirror of
https://github.com/kevingruesser/bootstrap-vz.git
synced 2025-08-22 18:00:35 +00:00
67284eaae5
This commit adds authentication optionally with passwords or static ssh pubkeys for the admin user. There are now three ways to grant access to the admin user: - Set a password for the user, or - Provide a ssh public key to allow remote ssh login, or - Use the EC2 public key (EC2 machines only) If a password is provided, this plugin sets the admin password. This also re-enables password login (off by default in Jessie). If the optional argument pubkey is present (it should be a full path to a ssh public key), it will ensure that the ssh public key is used to set up password less remote login for the admin user. Only one of these options (password, or pubkey) may be specified. If neither the password not a ssh public key location are specified, and if the EC2 init scripts are installed, the script for fetching the SSH authorized keys will be adjust to match the username specified. Fixes: https://github.com/andsens/bootstrap-vz/issues/248 Signed-off-by: Manoj Srivastava <srivasta@google.com>
28 lines
928 B
Python
28 lines
928 B
Python
|
|
|
|
def validate_manifest(data, validator, error):
|
|
import os.path
|
|
schema_path = os.path.normpath(os.path.join(os.path.dirname(__file__), 'manifest-schema.yml'))
|
|
validator(data, schema_path)
|
|
|
|
|
|
def resolve_tasks(taskset, manifest):
|
|
import tasks
|
|
from bootstrapvz.common.tasks import ssh
|
|
from bootstrapvz.providers.ec2.tasks import initd
|
|
|
|
from bootstrapvz.common.releases import jessie
|
|
if manifest.release < jessie:
|
|
taskset.update([ssh.DisableRootLogin])
|
|
|
|
if 'password' in manifest.plugins['admin_user']:
|
|
taskset.discard(ssh.DisableSSHPasswordAuthentication)
|
|
taskset.add(tasks.AdminUserCredentials)
|
|
else:
|
|
if initd.AddEC2InitScripts in taskset or 'pubkey' in manifest.plugins['admin_user']:
|
|
taskset.add(tasks.AdminUserCredentials)
|
|
|
|
taskset.update([tasks.AddSudoPackage,
|
|
tasks.CreateAdminUser,
|
|
tasks.PasswordlessSudo,
|
|
])
|