Scroll to navigation

MINI-BUILDD-SSH-UPLOADER-COMMAND(8) System Administration Utilities MINI-BUILDD-SSH-UPLOADER-COMMAND(8)

NAME

mini-buildd-ssh-uploader-command - Script to use as a 'command' in an authorized_key file to allow authorization to mini-buildd uploads via SSH.

DESCRIPTION

usage: mini-buildd-ssh-uploader-command [-h] [--version]

[-l {CRITICAL,ERROR,WARNING,INFO,DEBUG}]
[-v] [-q]

Script to use as a 'command' in an authorized_key file to allow authorization to mini-buildd uploads via SSH.

options:

show this help message and exit
show program's version number and exit
set log level (default: INFO)
DEPRECATED (use --log-level): increase log level. Give twice for max logs (default: 0)
DEPRECATED (use --log-level): decrease log level. Give twice for min logs (default: 0)

Steps to install 'uploads via SSH' (uses 'mini-buildd-uploader' as user name).

As user 'root'::

adduser --disabled-password mini-buildd-uploader # OPTIONAL: Allows 'auth log' with the fingerprint adduser mini-buildd-uploader adm

As mini-buildd-uploader::

# Be sure to only have one secret key in the keyring; we will use the first found.
mkdir -m700 .ssh edit ~/.dput.cf # Put the dput.cf target of your mini-buildd instance here; First target found will be used.

As admin user at the mini-buildd instance (web app)::

Generate a django pseudo user "ssh-uploads". In the new user's "Uploader" profile:
Add the mini-buildd-uploader's GPG public key to the django users "Uploader" profile. Add the repos to access ("may upload to"). PCA (prepare, check, activate) the new uploader profile.

To authorize a SSH Key, as user mini-buildd-uploader, add a line like this::

command="/usr/sbin/mini-buildd-ssh-uploader-command" ssh-rsa AA...

per ssh user key.

As SSH uploader::

Run 'ssh mini-buildd-uploader@the.mini-buildd.host'. This (will fail but) gives you a hint how to configure your '.dput.cf' Patch up your .dput.cf, then you should be able to upload like normal via dput with the new target.
November 2022 mini-buildd-ssh-uploader-command 1.9.111