search

Uberspace / manual

This manual documents how to use the basic features of Uberspace 7.
https://manual.uberspace.de/
Other
51 stars 108 forks source link

mention our SSH key somewhere #529

Open nichtmax opened 8 months ago

nichtmax commented 8 months ago

There's a Uberspace public key in ~/authorized_keys that's needed for the dashboard to connect to the asteroid. We don't mention this anywhere (except for the description of the key) and users might be alarmed by a key they don't know anything about.

jannis701 commented 8 months ago

one way would be to mention it in the uberlab-documentation (see my pull-request). or another idea (where I cannot help much): not hiding the key in the uberspace Dashboard, but making it undeletable and add a short explaination there.

either way it would be nice to have an hint to the explaination in the comment of the key. e.g.:

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzemLn04VCUIZuoGiQ89mU6y5Oq4FBO1oFIusBm0uy/jggZrezl50/ntDFbSdCvd8P4xKr++hFN/ug7SkikEULFwQ2efDw7RU45I4iT74St2v7Oa3L/cFV3RNB1sazkzfNyyogwKoykzrD69oRtJLwLsMY09JIMTS7erzIgWimMq5xo2/jzDcfRXaqsO8SDVuQE40SLe3xZz7cXdVRWmG2h+XCpsc8AbqlU0RtcomaT2Lz44lQHMJpZA7bBU6WkFNB52PvQEiQTIOxByTmKB9kVCZeSCyn/q5Y+E9pykYAsqTmZzT8DD/oa7O3QvVlI+8suA9QLcNFZszGdosi4YtTQ== Uberspace.de (nicht loeschen, siehe Uberspace Lab zu SSH-keys)

or

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzemLn04VCUIZuoGiQ89mU6y5Oq4FBO1oFIusBm0uy/jggZrezl50/ntDFbSdCvd8P4xKr++hFN/ug7SkikEULFwQ2efDw7RU45I4iT74St2v7Oa3L/cFV3RNB1sazkzfNyyogwKoykzrD69oRtJLwLsMY09JIMTS7erzIgWimMq5xo2/jzDcfRXaqsO8SDVuQE40SLe3xZz7cXdVRWmG2h+XCpsc8AbqlU0RtcomaT2Lz44lQHMJpZA7bBU6WkFNB52PvQEiQTIOxByTmKB9kVCZeSCyn/q5Y+E9pykYAsqTmZzT8DD/oa7O3QvVlI+8suA9QLcNFZszGdosi4YtTQ== Uberspace.de (nicht loeschen, siehe Hinweis im Dashboard)

jpbernius commented 8 months ago

I am not super familiar with advanced configurations of sshd, but a quick web search found this superuser.com thread which suggests you could have many entries in the AuthorizedKeysFile setting. This could allow a central authorized_keys file with the dashboard key.

Not sure if there are some problems (e.g., also giving root access to this key) that prevent this from solving the problem?