mirror of
https://github.com/apache/cloudstack.git
synced 2025-10-26 08:42:29 +01:00
6f244f3eac
The script would for example overwrite all existing keys in the authorized_keys file Some things in the bash script are also simplified
97 lines
3.0 KiB
Bash
Executable File
97 lines
3.0 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# Init file for SSH Public Keys Download Client
|
|
#
|
|
# chkconfig: 345 98 02
|
|
# description: SSH Public Keys Download Client
|
|
|
|
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
|
|
# Modify this line to specify the user (default is root)
|
|
user=root
|
|
|
|
# Add your DHCP lease folders here
|
|
DHCP_FOLDERS="/var/lib/dhclient/* /var/lib/dhcp3/*"
|
|
keys_received=0
|
|
file_count=0
|
|
|
|
for DHCP_FILE in $DHCP_FOLDERS; do
|
|
if [ -f $DHCP_FILE ]; then
|
|
file_count=$((file_count+1))
|
|
SSHKEY_SERVER_IP=$(grep dhcp-server-identifier $DHCP_FILE | tail -1 | awk '{print $NF}' | tr -d '\;')
|
|
|
|
if [ -n "$SSHKEY_SERVER_IP" ]; then
|
|
logger -t "cloud" "Sending request to ssh key server at $SSHKEY_SERVER_IP"
|
|
|
|
publickey=$(wget -q -t 3 -T 20 -O - http://$SSHKEY_SERVER_IP/latest/public-keys)
|
|
|
|
if [ $? -eq 0 ]; then
|
|
logger -t "cloud" "Got response from server at $SSHKEY_SERVER_IP"
|
|
keys_received=1
|
|
break
|
|
fi
|
|
else
|
|
logger -t "cloud" "Could not find ssh key server IP in $DHCP_FILE trying with the name data-server "
|
|
fi
|
|
fi
|
|
done
|
|
|
|
if [ "$keys_received" == "0" ]; then
|
|
SSHKEY_SERVER_IP=$(nslookup data-server | grep Address |tr '\n' ' '| awk '{print $4}')
|
|
logger -t "cloud" "Sending request to ssh key server at $SSHKEY_SERVER_IP"
|
|
publickey=$(wget -q -t 3 -T 20 -O - http://data-server/latest/public-keys)
|
|
if [ $? -eq 0 ]
|
|
then
|
|
logger -t "cloud" "Got response from server at $SSHKEY_SERVER_IP"
|
|
keys_received=1
|
|
else
|
|
logger -t "cloud" "Could not resolve the name data-server"
|
|
fi
|
|
fi
|
|
|
|
if [ "$keys_received" == "0" ]; then
|
|
logger -t "cloud" "Failed to get ssh keys from any server"
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z "$publickey" ]; then
|
|
logger -t "cloud" "Did not receive any keys from any server"
|
|
exit 1
|
|
fi
|
|
|
|
homedir=$(grep ^$user /etc/passwd|awk -F ":" '{print $6}')
|
|
sshdir=$homedir/.ssh
|
|
authorized=$sshdir/authorized_keys
|
|
|
|
if [ ! -e $sshdir ]; then
|
|
mkdir $sshdir
|
|
chmod 700 $sshdir
|
|
fi
|
|
|
|
if [ ! -e $authorized ]; then
|
|
touch $authorized
|
|
chmod 600 $authorized
|
|
fi
|
|
|
|
cat $authorized|grep -v "$publickey"|tee $authorized > /dev/null
|
|
echo "$publickey" >> $authorized
|
|
|
|
which restorecon && restorecon -R -v $sshdir
|
|
|
|
exit 0 |