Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

mention our SSH key somewhere #529

Open
nichtmax opened this issue Dec 8, 2023 · 2 comments
Open

mention our SSH key somewhere #529

nichtmax opened this issue Dec 8, 2023 · 2 comments

Comments

@nichtmax
Copy link
Member

nichtmax commented Dec 8, 2023

There's a Uberspace public key in ~/authorized_keys that's needed for the dashboard to connect to the asteroid. We don't mention this anywhere (except for the description of the key) and users might be alarmed by a key they don't know anything about.

@jannis701
Copy link

one way would be to mention it in the uberlab-documentation (see my pull-request). or another idea (where I cannot help much): not hiding the key in the uberspace Dashboard, but making it undeletable and add a short explaination there.

either way it would be nice to have an hint to the explaination in the comment of the key. e.g.:

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzemLn04VCUIZuoGiQ89mU6y5Oq4FBO1oFIusBm0uy/jggZrezl50/ntDFbSdCvd8P4xKr++hFN/ug7SkikEULFwQ2efDw7RU45I4iT74St2v7Oa3L/cFV3RNB1sazkzfNyyogwKoykzrD69oRtJLwLsMY09JIMTS7erzIgWimMq5xo2/jzDcfRXaqsO8SDVuQE40SLe3xZz7cXdVRWmG2h+XCpsc8AbqlU0RtcomaT2Lz44lQHMJpZA7bBU6WkFNB52PvQEiQTIOxByTmKB9kVCZeSCyn/q5Y+E9pykYAsqTmZzT8DD/oa7O3QvVlI+8suA9QLcNFZszGdosi4YtTQ== Uberspace.de (nicht loeschen, siehe Uberspace Lab zu SSH-keys)

or

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzemLn04VCUIZuoGiQ89mU6y5Oq4FBO1oFIusBm0uy/jggZrezl50/ntDFbSdCvd8P4xKr++hFN/ug7SkikEULFwQ2efDw7RU45I4iT74St2v7Oa3L/cFV3RNB1sazkzfNyyogwKoykzrD69oRtJLwLsMY09JIMTS7erzIgWimMq5xo2/jzDcfRXaqsO8SDVuQE40SLe3xZz7cXdVRWmG2h+XCpsc8AbqlU0RtcomaT2Lz44lQHMJpZA7bBU6WkFNB52PvQEiQTIOxByTmKB9kVCZeSCyn/q5Y+E9pykYAsqTmZzT8DD/oa7O3QvVlI+8suA9QLcNFZszGdosi4YtTQ== Uberspace.de (nicht loeschen, siehe Hinweis im Dashboard)

@jpbernius
Copy link

I am not super familiar with advanced configurations of sshd, but a quick web search found this superuser.com thread which suggests you could have many entries in the AuthorizedKeysFile setting. This could allow a central authorized_keys file with the dashboard key.

Not sure if there are some problems (e.g., also giving root access to this key) that prevent this from solving the problem?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants