use ssh certificates
parent
f953c20d19
commit
22b987c57a
|
@ -18,6 +18,8 @@ if [ -z "$SSH_KEY" ]; then
|
|||
exit 1
|
||||
fi
|
||||
|
||||
SSH_KEY_CERT="${SSH_KEY_CERT:-${PLUGIN_KEY_CERT}}"
|
||||
|
||||
KNOWN_HOSTS="${KNOWN_HOSTS:=${PLUGIN_KNOWN_HOSTS}}"
|
||||
|
||||
SOURCES="${SOURCES:-${PLUGIN_SOURCES}}"
|
||||
|
@ -38,10 +40,19 @@ ARGS=${ARGS:-${PLUGIN_ARGS}}
|
|||
# prepare SSH
|
||||
|
||||
mkdir -p "$HOME/.ssh"
|
||||
keyfile="$HOME/.ssh/id_rsa"
|
||||
keyfile="$HOME/.ssh/user_key"
|
||||
echo "$SSH_KEY" > "$keyfile"
|
||||
chmod 0600 "$keyfile"
|
||||
|
||||
echo 'Host *' > "$HOME/.ssh/config"
|
||||
echo " IdentityFile $keyfile" >> "$HOME/.ssh/config"
|
||||
|
||||
if [ -n "${SSH_KEY_CERT}" ]; then
|
||||
certfile="$HOME/.ssh/user_key-cert.pub"
|
||||
echo "${SSH_KEY_CERT}" > "$certfile"
|
||||
echo " CertificateFile $certfile" >> "$HOME/.ssh/config"
|
||||
fi
|
||||
|
||||
known_hosts_file="${HOME}/.ssh/known_hosts"
|
||||
[ -n "${KNOWN_HOSTS}" ] && echo "${KNOWN_HOSTS}" >> "$known_hosts_file"
|
||||
[ -f "${known_hosts_file}" ] && chmod 0600 "$known_hosts_file"
|
||||
|
|
Loading…
Reference in New Issue