table of contents
- experimental 1.9.111
MINI-BUILDD-SSH-UPLOADER-COMMAND(8) | System Administration Utilities | MINI-BUILDD-SSH-UPLOADER-COMMAND(8) |
NAME¶
mini-buildd-ssh-uploader-command - Script to use as a 'command' in an authorized_key file to allow authorization to mini-buildd uploads via SSH.
DESCRIPTION¶
usage: mini-buildd-ssh-uploader-command [-h] [--version]
- [-l {CRITICAL,ERROR,WARNING,INFO,DEBUG}]
- [-v] [-q]
Script to use as a 'command' in an authorized_key file to allow authorization to mini-buildd uploads via SSH.
options:¶
- -h, --help
- show this help message and exit
- --version
- show program's version number and exit
- -l {CRITICAL,ERROR,WARNING,INFO,DEBUG}, --log-level {CRITICAL,ERROR,WARNING,INFO,DEBUG}
- set log level (default: INFO)
- -v, --verbose
- DEPRECATED (use --log-level): increase log level. Give twice for max logs (default: 0)
- -q, --quiet
- DEPRECATED (use --log-level): decrease log level. Give twice for min logs (default: 0)
Steps to install 'uploads via SSH' (uses 'mini-buildd-uploader' as user name).
As user 'root'::
- adduser --disabled-password mini-buildd-uploader # OPTIONAL: Allows 'auth log' with the fingerprint adduser mini-buildd-uploader adm
As mini-buildd-uploader::
- gpg --gen-key
- # Be sure to only have one secret key in the keyring; we will use the first found.
- mkdir -m700 .ssh edit ~/.dput.cf # Put the dput.cf target of your mini-buildd instance here; First target found will be used.
As admin user at the mini-buildd instance (web app)::
- Generate a django pseudo user "ssh-uploads". In the new user's "Uploader" profile:
- Add the mini-buildd-uploader's GPG public key to the django users "Uploader" profile. Add the repos to access ("may upload to"). PCA (prepare, check, activate) the new uploader profile.
To authorize a SSH Key, as user mini-buildd-uploader, add a line like this::
- command="/usr/sbin/mini-buildd-ssh-uploader-command" ssh-rsa AA...
per ssh user key.
As SSH uploader::
- Run 'ssh mini-buildd-uploader@the.mini-buildd.host'. This (will fail but) gives you a hint how to configure your '.dput.cf' Patch up your .dput.cf, then you should be able to upload like normal via dput with the new target.
November 2022 | mini-buildd-ssh-uploader-command 1.9.111 |