Re: [ptxdist] [PATCHv2] dropbear: add authorized key directory

[Michael Olbrich <m.olbrich@pengutronix.de>]

On Mon, Jul 13, 2015 at 04:20:40PM +0200, Bruno Thomsen wrote:
> This directory (/root/.ssh) is needed when doing ssh login with pre-shared keys,
> and it must be configured with correct permissions otherwise they will be rejected.
> 
> One-line psk setup (x.x.x.x = target):
> cat ~/.ssh/id_ecdsa.pub | ssh root@x.x.x.x "cat - >> ~/.ssh/authorized_keys"

I don't really like this. This is user configuration and should be a
separate package.

Michael

> v2:
> Commit message cleanup.
> Wrongly included OpenSSH one-liner; changed ed25519 to ecdsa.
> 
> Signed-off-by: Bruno Thomsen <bth@kamstrup.com>
> ---
>  rules/dropbear.make | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/rules/dropbear.make b/rules/dropbear.make
> index a659114..9a510a4 100644
> --- a/rules/dropbear.make
> +++ b/rules/dropbear.make
> @@ -316,6 +316,7 @@ endif
>  endif
>  
>  	@$(call install_copy, dropbear, 0, 0, 0755, $(PTXCONF_DROPBEAR_KEY_DIR))
> +	@$(call install_copy, dropbear, 0, 0, 0600, /root/.ssh)
>  
>  	@$(call install_finish, dropbear)
>  
> -- 
> 2.1.4
> 
> 
> -- 
> ptxdist mailing list
> ptxdist@pengutronix.de

-- 
Pengutronix e.K.                           |                             |
Industrial Linux Solutions                 | http://www.pengutronix.de/  |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

-- 
ptxdist mailing list
ptxdist@pengutronix.de