67 lines
1.8 KiB
Bash
Executable File
67 lines
1.8 KiB
Bash
Executable File
#!/bin/bash
|
|
# Setup passwordless ssh for `oneadmin` (authorized_keys and known_hosts)
|
|
|
|
set -e -x -a
|
|
|
|
# Include config
|
|
. config/all_vars
|
|
|
|
key_hosts=${key_hosts:-$opennebula_hosts}
|
|
|
|
# Generate keys for oneadmin if not yet
|
|
for play_host in $key_hosts; do
|
|
ssh root@$play_host <<EOF
|
|
set -e -x
|
|
if [ ! -f /var/lib/one/.ssh/id_rsa.pub ]; then
|
|
su - oneadmin -c 'ssh-keygen -t rsa -f /var/lib/one/.ssh/id_rsa -q -P ""'
|
|
fi
|
|
EOF
|
|
done
|
|
|
|
# Gather & distribute host keys
|
|
ssh-keyscan $opennebula_hosts > tmp$$
|
|
for play_host in $key_hosts; do
|
|
ssh root@$play_host "ssh-keyscan $int_ips" >> tmp$$
|
|
break
|
|
done
|
|
for play_host in $key_hosts; do
|
|
cat tmp$$ > hostkeys$$
|
|
ssh root@$play_host 'cat /var/lib/one/.ssh/known_hosts || true' >> hostkeys$$
|
|
ssh root@$play_host 'ssh-keyscan localhost' >> hostkeys$$
|
|
cat hostkeys$$ | sort | uniq | ssh root@$play_host 'cat > /var/lib/one/.ssh/known_hosts'
|
|
rm hostkeys$$
|
|
done
|
|
rm tmp$$
|
|
|
|
# Gather & distribute oneadmin keys
|
|
> tmp$$
|
|
for host in $opennebula_hosts; do
|
|
ssh root@$host 'cat /var/lib/one/.ssh/id_rsa.pub' >> tmp$$
|
|
done
|
|
for play_host in $key_hosts; do
|
|
ssh root@$play_host 'cat /var/lib/one/.ssh/authorized_keys || true' >> tmp$$
|
|
cat tmp$$ | sort | uniq | ssh root@$play_host 'cat > /var/lib/one/.ssh/authorized_keys'
|
|
done
|
|
rm tmp$$
|
|
|
|
# Generate keys for root if not yet
|
|
for play_host in $key_hosts; do
|
|
ssh root@$play_host <<EOF
|
|
set -e -x
|
|
if [ ! -f /root/.ssh/id_rsa.pub ]; then
|
|
ssh-keygen -t rsa -q -P ""
|
|
fi
|
|
EOF
|
|
done
|
|
|
|
# Gather & distribute root keys
|
|
> tmp$$
|
|
for host in $opennebula_hosts; do
|
|
ssh root@$host 'cat /root/.ssh/id_rsa.pub' >> tmp$$
|
|
done
|
|
for play_host in $key_hosts; do
|
|
ssh root@$play_host 'cat /root/.ssh/authorized_keys || true' >> tmp$$
|
|
cat tmp$$ | sort | uniq | ssh root@$play_host 'cat > /root/.ssh/authorized_keys'
|
|
done
|
|
rm tmp$$
|