xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2026-01-10 01:52:31 +00:00
Code Issues Projects Releases Wiki Activity

Explicitly check root user keys

Browse Source 
Replace simple existence check
with a check that assures the content also matches.
This commit is contained in:
Jarrod Johnson
2025-06-25 16:10:26 -04:00
parent 61749c3649
commit 05dbbd6ce0
1 changed files with 20 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
confluent_server/bin/confluent_selfcheck
View File

@@ -223,7 +223,26 @@ if __name__ == '__main__':
emprint('TFTP failure, PXE will not work, though media and HTTP boot can still work. (Example resolution: osdeploy initialize -p)')
fprint('SSH root user public key: ')
if glob.glob('/var/lib/confluent/public/site/ssh/*.rootpubkey'):
print('OK')
if not glob.glob('/root/.ssh/id_*.pub'):
emprint('No SSH keys for root user, passwordless SSH from managers to nodes may not work (Example resolution: osdeploy initialize -u)')
for userpub in glob.glob('/root/.ssh/id_*.pub'):
with open(userpub) as f:
pubkey = f.read().strip()
for sitepubkey in glob.glob('/var/lib/confluent/public/site/ssh/*.rootpubkey'):
with open(sitepubkey) as sf:
spubkey = sf.read().strip()
for keyline in spubkey.split('\n'):
if keyline == pubkey:
print('OK')
break
else:
continue
break
else:
continue
break
else:
emprint('No matching public key found for root user (Example resolution: osdeploy initialize -u)')
else:
emprint('No trusted ssh keys for root user, passwordless SSH from managers to nodes may not work (Example resolution: osdeploy initialize -u)')
if sshutil.sshver() > 7.6: