mirror of
https://github.com/apache/cloudstack.git
synced 2025-11-04 00:02:37 +01:00
90 lines
2.6 KiB
Bash
Executable File
90 lines
2.6 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# Init file for SSH Public Keys Download Client
|
|
#
|
|
# chkconfig: 345 98 02
|
|
# description: SSH Public Keys Download Client
|
|
|
|
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
|
|
# Modify this line to specify the user (default is root)
|
|
user=root
|
|
|
|
# Add your DHCP lease folders here
|
|
DHCP_FOLDERS="/var/lib/dhclient/* /var/lib/dhcp3/* /var/lib/dhcp/*"
|
|
keys_received=0
|
|
file_count=0
|
|
|
|
for DHCP_FILE in $DHCP_FOLDERS; do
|
|
if [ -f $DHCP_FILE ]; then
|
|
file_count=$((file_count+1))
|
|
SSHKEY_SERVER_IP=$(grep dhcp-server-identifier $DHCP_FILE | tail -1 | awk '{print $NF}' | tr -d '\;')
|
|
|
|
if [ -n "$SSHKEY_SERVER_IP" ]; then
|
|
logger -t "cloud" "Found ssh key server at $SSHKEY_SERVER_IP"
|
|
break
|
|
else
|
|
logger -t "cloud" "Could not find ssh key server IP in $DHCP_FILE"
|
|
fi
|
|
fi
|
|
done
|
|
|
|
if [ -z "$SSHKEY_SERVER_IP" ]; then
|
|
logger -t "cloud" "Unable to determine the password server, falling back to data-server"
|
|
SSHKEY_SERVER_IP=data-server
|
|
fi
|
|
|
|
logger -t "cloud" "Sending request to ssh key server at $SSHKEY_SERVER_IP"
|
|
publickey=$(wget -q -t 3 -T 20 -O - http://$SSHKEY_SERVER_IP/latest/public-keys)
|
|
if [ $? -eq 0 ]; then
|
|
logger -t "cloud" "Got response from server at $SSHKEY_SERVER_IP"
|
|
keys_received=1
|
|
fi
|
|
|
|
if [ "$keys_received" == "0" ]; then
|
|
logger -t "cloud" "Failed to get ssh keys from any server"
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z "$publickey" ]; then
|
|
logger -t "cloud" "Did not receive any keys from any server"
|
|
exit 1
|
|
fi
|
|
|
|
homedir=$(getent passwd $user|awk -F ":" '{print $6}')
|
|
sshdir=$homedir/.ssh
|
|
authorized=$sshdir/authorized_keys
|
|
|
|
if [ ! -e $sshdir ]; then
|
|
mkdir $sshdir
|
|
chmod 700 $sshdir
|
|
fi
|
|
|
|
if [ ! -e $authorized ]; then
|
|
touch $authorized
|
|
chmod 600 $authorized
|
|
fi
|
|
|
|
sed -i "/ cloudstack@apache.org$/d" $authorized
|
|
echo "$publickey cloudstack@apache.org" >> $authorized
|
|
|
|
which restorecon && restorecon -R -v $sshdir
|
|
|
|
exit 0
|