86 lines
2.5 KiB
Go
86 lines
2.5 KiB
Go
package configure
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"path"
|
|
|
|
warewulfconf "github.com/warewulf/warewulf/internal/pkg/config"
|
|
"github.com/warewulf/warewulf/internal/pkg/overlay"
|
|
"github.com/warewulf/warewulf/internal/pkg/util"
|
|
"github.com/warewulf/warewulf/internal/pkg/wwlog"
|
|
)
|
|
|
|
/*
|
|
Create password less ssh keys in the home of the user who its
|
|
calling this function. (root in our case)
|
|
*/
|
|
func SSH(keyTypes ...string) error {
|
|
if os.Getuid() == 0 {
|
|
fmt.Printf("Updating system keys\n")
|
|
conf := warewulfconf.Get()
|
|
|
|
if conf.Warewulf.EnableHostOverlay() {
|
|
if err := overlay.BuildHostOverlay(); err != nil {
|
|
wwlog.Warn("host overlay could not be built: %s", err)
|
|
}
|
|
} else {
|
|
wwlog.Info("host overlays are disabled")
|
|
}
|
|
|
|
wwkeydir := path.Join(conf.Paths.Sysconfdir, "warewulf/keys") + "/"
|
|
|
|
err := os.MkdirAll(path.Join(conf.Paths.Sysconfdir, "warewulf/keys"), 0755)
|
|
if err != nil {
|
|
return fmt.Errorf("could not create base directory: %s", err)
|
|
}
|
|
|
|
for _, k := range keyTypes {
|
|
keytype := "ssh_host_" + k + "_key"
|
|
if !util.IsFile(path.Join(wwkeydir, keytype)) {
|
|
fmt.Printf("Setting up key: %s\n", keytype)
|
|
wwlog.Debug("Creating new %s key", keytype)
|
|
err = util.ExecInteractive("ssh-keygen", "-q", "-t", k, "-f", path.Join(wwkeydir, keytype), "-C", "", "-N", "")
|
|
if err != nil {
|
|
wwlog.Error("Failed to exec ssh-keygen: %s", err)
|
|
return fmt.Errorf("failed to exec ssh-keygen command: %w", err)
|
|
}
|
|
} else {
|
|
fmt.Printf("Skipping, key already exists: %s\n", keytype)
|
|
}
|
|
}
|
|
} else {
|
|
fmt.Printf("Updating user's keys\n")
|
|
}
|
|
|
|
homeDir, err := os.UserHomeDir()
|
|
if err != nil {
|
|
return fmt.Errorf("could not obtain the user's home directory: %s", err)
|
|
}
|
|
|
|
authorizedKeys := path.Join(homeDir, "/.ssh/authorized_keys")
|
|
|
|
if !util.IsFile(authorizedKeys) {
|
|
if len(keyTypes) > 0 {
|
|
keyType := keyTypes[0]
|
|
fmt.Printf("Setting up: %s\n", authorizedKeys)
|
|
privKey := path.Join(homeDir, "/.ssh/id_"+keyType)
|
|
pubKey := privKey + ".pub"
|
|
err = util.ExecInteractive("ssh-keygen", "-q", "-t", keyType, "-f", privKey, "-C", "", "-N", "")
|
|
if err != nil {
|
|
return fmt.Errorf("failed to exec ssh-keygen command: %w", err)
|
|
}
|
|
err := util.CopyFile(pubKey, authorizedKeys)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to copy %s to authorized_keys: %w", pubKey, err)
|
|
}
|
|
} else {
|
|
fmt.Printf("Skipping authorized_keys: no key types configured\n")
|
|
}
|
|
} else {
|
|
fmt.Printf("Skipping authorized_keys: already exists: %s\n", authorizedKeys)
|
|
}
|
|
|
|
return nil
|
|
}
|