Move SSH keys to authorized_keys file editable using Nest Bot

polypixeldev commented 2 months ago

See #53 for more info.

Requires actions on Nest VM:

Remove AuthorizedKeysCommand from /etc/ssh/sshd_config (and the associated script /etc/ssh/ldap_script.sh)
Write and run a script to migrate all Nest user's keys from Authentik to an authorized_keys file
Modify /etc/sudoers file to allow passwordless execution as root of /home/nest-internal/nest/nest-bot/src/os/scripts/read_keys.sh and /home/nest-internal/nest/nest-bot/src/os/scripts/set_keys.sh

Note: the migration is just for the sake of proper documentation - it has already been applied in production.

Closes #53

cskartikey commented 2 months ago

Do admins have a way to manage users' ssh keys?

polypixeldev commented 2 months ago

Do admins have a way to manage users' ssh keys?

Since SSH keys will just be in authorized_keys file, admins can just edit that

polypixeldev commented 2 months ago

will merge after the upgrade is done

hackclub / nest