[ptxdist] [PATCHv2] dropbear: add authorized key directory

[ptxdist] [PATCHv2] dropbear: add authorized key directory

[Bruno Thomsen]

This directory (/root/.ssh) is needed when doing ssh login with pre-shared keys,
and it must be configured with correct permissions otherwise they will be rejected.

One-line psk setup (x.x.x.x = target):
cat ~/.ssh/id_ecdsa.pub | ssh root@x.x.x.x "cat - >> ~/.ssh/authorized_keys"

v2:
Commit message cleanup.
Wrongly included OpenSSH one-liner; changed ed25519 to ecdsa.

Signed-off-by: Bruno Thomsen <bth@kamstrup.com>
---
 rules/dropbear.make | 1 +
 1 file changed, 1 insertion(+)

diff --git a/rules/dropbear.make b/rules/dropbear.make
index a659114..9a510a4 100644
--- a/rules/dropbear.make
+++ b/rules/dropbear.make
@@ -316,6 +316,7 @@ endif
 endif
 
 	@$(call install_copy, dropbear, 0, 0, 0755, $(PTXCONF_DROPBEAR_KEY_DIR))
+	@$(call install_copy, dropbear, 0, 0, 0600, /root/.ssh)
 
 	@$(call install_finish, dropbear)
 
-- 
2.1.4


-- 
ptxdist mailing list
ptxdist@pengutronix.de

Re: [ptxdist] [PATCHv2] dropbear: add authorized key directory

[Michael Olbrich]

On Mon, Jul 13, 2015 at 04:20:40PM +0200, Bruno Thomsen wrote:
> This directory (/root/.ssh) is needed when doing ssh login with pre-shared keys,
> and it must be configured with correct permissions otherwise they will be rejected.
> 
> One-line psk setup (x.x.x.x = target):
> cat ~/.ssh/id_ecdsa.pub | ssh root@x.x.x.x "cat - >> ~/.ssh/authorized_keys"

I don't really like this. This is user configuration and should be a
separate package.

Michael

> v2:
> Commit message cleanup.
> Wrongly included OpenSSH one-liner; changed ed25519 to ecdsa.
> 
> Signed-off-by: Bruno Thomsen <bth@kamstrup.com>
> ---
>  rules/dropbear.make | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/rules/dropbear.make b/rules/dropbear.make
> index a659114..9a510a4 100644
> --- a/rules/dropbear.make
> +++ b/rules/dropbear.make
> @@ -316,6 +316,7 @@ endif
>  endif
>  
>  	@$(call install_copy, dropbear, 0, 0, 0755, $(PTXCONF_DROPBEAR_KEY_DIR))
> +	@$(call install_copy, dropbear, 0, 0, 0600, /root/.ssh)
>  
>  	@$(call install_finish, dropbear)
>  
> -- 
> 2.1.4
> 
> 
> -- 
> ptxdist mailing list
> ptxdist@pengutronix.de

-- 
Pengutronix e.K.                           |                             |
Industrial Linux Solutions                 | http://www.pengutronix.de/  |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

-- 
ptxdist mailing list
ptxdist@pengutronix.de