Puppet/Openvox and ssh authorized_keys file

Puppet/Openvox and ssh authorized_keys file

[Iztok Gregori]

Hi to all!

I have some specific questions regarding how Proxmox handles 
authorized_keys file and how to manage that file with puppet/openvox.

- When the "/etc/pve/priv/authorized_keys" is created/updated by 
Proxmox? I suspect on the cluster creation and after a node is 
added/removed, but I'm not certain.
- If is a regular file or is missing, when the symbolic link 
"/root/.ssh/authorized_keys" (which points to 
"/etc/pve/priv/authorized_key") is recreated? At node startup?
- Is it safe to let openvox/puppet manage directly 
"/etc/pve/priv/authorized_keys" (so we can automatically add/remove 
administrator ssh keys as needed)?

Thank you for your time
Iztok Gregori
-- 
Iztok Gregori
ICT Systems and Services
Elettra - Sincrotrone Trieste S.C.p.A.
http://www.elettra.eu

AW: Puppet/Openvox and ssh authorized_keys file

[Pheeef]

[-- Attachment #1.1: Type: text/plain, Size: 353 bytes --]


Hi Iztok!

I wouldn't touch /etc/pve/priv/authorized_keys and just add another directory to your `AuthorizedKeysFile` entry in your sshd_config

Just make sure that both your new puppet managed file(s) and the /etc/pve/priv/authorized_keys are included.

cheeer
~ pheeef

PS: sending again because I forgot to put the mailing list in cc :) 

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 343 bytes --]