Open nichtmax opened 8 months ago
one way would be to mention it in the uberlab-documentation (see my pull-request). or another idea (where I cannot help much): not hiding the key in the uberspace Dashboard, but making it undeletable and add a short explaination there.
either way it would be nice to have an hint to the explaination in the comment of the key. e.g.:
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzemLn04VCUIZuoGiQ89mU6y5Oq4FBO1oFIusBm0uy/jggZrezl50/ntDFbSdCvd8P4xKr++hFN/ug7SkikEULFwQ2efDw7RU45I4iT74St2v7Oa3L/cFV3RNB1sazkzfNyyogwKoykzrD69oRtJLwLsMY09JIMTS7erzIgWimMq5xo2/jzDcfRXaqsO8SDVuQE40SLe3xZz7cXdVRWmG2h+XCpsc8AbqlU0RtcomaT2Lz44lQHMJpZA7bBU6WkFNB52PvQEiQTIOxByTmKB9kVCZeSCyn/q5Y+E9pykYAsqTmZzT8DD/oa7O3QvVlI+8suA9QLcNFZszGdosi4YtTQ== Uberspace.de (nicht loeschen, siehe Uberspace Lab zu SSH-keys)
or
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzemLn04VCUIZuoGiQ89mU6y5Oq4FBO1oFIusBm0uy/jggZrezl50/ntDFbSdCvd8P4xKr++hFN/ug7SkikEULFwQ2efDw7RU45I4iT74St2v7Oa3L/cFV3RNB1sazkzfNyyogwKoykzrD69oRtJLwLsMY09JIMTS7erzIgWimMq5xo2/jzDcfRXaqsO8SDVuQE40SLe3xZz7cXdVRWmG2h+XCpsc8AbqlU0RtcomaT2Lz44lQHMJpZA7bBU6WkFNB52PvQEiQTIOxByTmKB9kVCZeSCyn/q5Y+E9pykYAsqTmZzT8DD/oa7O3QvVlI+8suA9QLcNFZszGdosi4YtTQ== Uberspace.de (nicht loeschen, siehe Hinweis im Dashboard)
I am not super familiar with advanced configurations of sshd, but a quick web search found this superuser.com thread which suggests you could have many entries in the AuthorizedKeysFile
setting. This could allow a central authorized_keys file with the dashboard key.
Not sure if there are some problems (e.g., also giving root access to this key) that prevent this from solving the problem?
There's a Uberspace public key in
~/authorized_keys
that's needed for the dashboard to connect to the asteroid. We don't mention this anywhere (except for the description of the key) and users might be alarmed by a key they don't know anything about.