.\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.49.2.
.TH MINI-BUILDD-SSH-CLIENT-COMMAND "8" "November 2022" "mini-buildd-ssh-client-command 1.9.111" "System Administration Utilities"
.SH NAME
mini-buildd-ssh-client-command \- Script to use as a 'command' in an authorized_key file to allow mini-buildd-api runs only via SSH.
.SH DESCRIPTION
usage: mini\-buildd\-ssh\-client\-command [\-h] [\-\-version]
.TP
[\-l {CRITICAL,ERROR,WARNING,INFO,DEBUG}]
[\-v] [\-q]
.PP
Script to use as a 'command' in an authorized_key file to allow mini\-buildd\-api runs only via SSH.
.SS "options:"
.TP
\fB\-h\fR, \fB\-\-help\fR
show this help message and exit
.TP
\fB\-\-version\fR
show program's version number and exit
.TP
\fB\-l\fR {CRITICAL,ERROR,WARNING,INFO,DEBUG}, \fB\-\-log\-level\fR {CRITICAL,ERROR,WARNING,INFO,DEBUG}
set log level (default: INFO)
.TP
\fB\-v\fR, \fB\-\-verbose\fR
DEPRECATED (use \fB\-\-log\-level\fR): increase log level. Give twice for max logs (default: 0)
.TP
\fB\-q\fR, \fB\-\-quiet\fR
DEPRECATED (use \fB\-\-log\-level\fR): decrease log level. Give twice for min logs (default: 0)
.PP
You may use this to authorize certain roles (for now: superuser and
staff) via plain secure SSH.
.PP
Steps to install:
.PP
As user 'root'::
.IP
adduser \fB\-\-disabled\-password\fR mini\-buildd\-admin
adduser \fB\-\-disabled\-password\fR mini\-buildd\-staff
# OPTIONAL: Allows 'auth log' with the fingerprint
adduser mini\-buildd\-admin adm
adduser mini\-buildd\-staff adm
.PP
As mini\-buildd\-[staff|uploader]::
.IP
Set up ~/.dput.cf with exactly one mini\-buildd target.
Configure python\-keyring to use a plaintext keyring, see "/usr/share/doc/mini\-buildd/examples/keyringrc.cfg"
Run once to save the password:
.IP
\f(CW$ mini-buildd-api admin|staff@TARGET status\fR
.PP
As admin user at the mini\-buildd instance (web app)::
.IP
Generate appropriate django pseudo users ("admin" does already exist).
.PP
To authorize a SSH Key, as user mini\-buildd\-uploader, add a line like this::
.IP
command="/usr/sbin/mini\-buildd\-ssh\-client\-command" ssh\-rsa AA...
.PP
per ssh user key.
.PP
As SSH user::
.IP
Run 'ssh mini\-buildd\-[admin|staff]@your.host.name mini\-buildd\-api \fB\-x\fR \fB\-z\fR \fB\-y\fR