particle-os/debian-forge
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

stages/org.osbuild.users: support multiple SSH keys

Browse source 
Add a new attribute, "keys", to allow specifying multiple public SSH
keys to install to a users authorized_keys file.

This maintains backwards compatibility with the existing "key" attribute
that can only specify a single SSH key to install into the file (without
using some newline hacks).

Signed-off-by: Michael Ho <michael.ho@ieee.org>
This commit is contained in:
Michael Ho 2023-09-14 14:53:58 +02:00 • committed by Achilleas Koutsou
parent 6b851493c1
commit 21054b181c
1 changed files with 15 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

19
stages/org.osbuild.users
View file

@ -63,6 +63,13 @@ SCHEMA = """
"key": {
"description": "SSH Public Key to add to ~/.ssh/authorized_keys",
"type": "string"
},
"keys": {
"description": "Array of SSH Public Keys to add to ~/.ssh/authorized_keys",
"type": "array",
"items": {
"type": "string"
}
}
}
}
@ -124,7 +131,7 @@ def usermod(root, name, gid=None, groups=None, description=None, home=None, shel
subprocess.run(["chroot", root, "usermod", *arguments, name], check=True)
def add_ssh_key(root, user, key):
def add_ssh_keys(root, user, keys):
_, _, uid, gid, _, home, _ = getpwnam(root, user)
ssh_dir = f"{root}/{home}/.ssh"
authorized_keys = f"{ssh_dir}/authorized_keys"
@ -134,7 +141,7 @@ def add_ssh_key(root, user, key):
os.chown(ssh_dir, int(uid), int(gid))
with open(authorized_keys, "a", encoding="utf8") as f:
f.write(f"{key}\n")
f.write("\n".join(keys) + "\n")
os.chown(authorized_keys, int(uid), int(gid))
os.chmod(authorized_keys, 0o600)
@ -176,9 +183,13 @@ def main(tree, options):
else:
useradd(tree, name, uid, gid, groups, description, home, shell, password)
key = user_options.get("key") # Public SSH key
# following maintains backwards compatibility for handling a single ssh key
key = user_options.get("key") # Public SSH key
keys = user_options.get("keys", []) # Additional public SSH keys
if key:
add_ssh_key(tree, name, key)
keys.append(key)
if keys:
add_ssh_keys(tree, name, keys)
return 0