manual icon indicating copy to clipboard operation
manual copied to clipboard

mention our SSH key somewhere

Open nichtmax opened this issue 1 year ago • 2 comments

There's a Uberspace public key in ~/authorized_keys that's needed for the dashboard to connect to the asteroid. We don't mention this anywhere (except for the description of the key) and users might be alarmed by a key they don't know anything about.

nichtmax avatar Dec 08 '23 09:12 nichtmax

one way would be to mention it in the uberlab-documentation (see my pull-request). or another idea (where I cannot help much): not hiding the key in the uberspace Dashboard, but making it undeletable and add a short explaination there.

either way it would be nice to have an hint to the explaination in the comment of the key. e.g.:

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzemLn04VCUIZuoGiQ89mU6y5Oq4FBO1oFIusBm0uy/jggZrezl50/ntDFbSdCvd8P4xKr++hFN/ug7SkikEULFwQ2efDw7RU45I4iT74St2v7Oa3L/cFV3RNB1sazkzfNyyogwKoykzrD69oRtJLwLsMY09JIMTS7erzIgWimMq5xo2/jzDcfRXaqsO8SDVuQE40SLe3xZz7cXdVRWmG2h+XCpsc8AbqlU0RtcomaT2Lz44lQHMJpZA7bBU6WkFNB52PvQEiQTIOxByTmKB9kVCZeSCyn/q5Y+E9pykYAsqTmZzT8DD/oa7O3QvVlI+8suA9QLcNFZszGdosi4YtTQ== Uberspace.de (nicht loeschen, siehe Uberspace Lab zu SSH-keys)

or

ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzemLn04VCUIZuoGiQ89mU6y5Oq4FBO1oFIusBm0uy/jggZrezl50/ntDFbSdCvd8P4xKr++hFN/ug7SkikEULFwQ2efDw7RU45I4iT74St2v7Oa3L/cFV3RNB1sazkzfNyyogwKoykzrD69oRtJLwLsMY09JIMTS7erzIgWimMq5xo2/jzDcfRXaqsO8SDVuQE40SLe3xZz7cXdVRWmG2h+XCpsc8AbqlU0RtcomaT2Lz44lQHMJpZA7bBU6WkFNB52PvQEiQTIOxByTmKB9kVCZeSCyn/q5Y+E9pykYAsqTmZzT8DD/oa7O3QvVlI+8suA9QLcNFZszGdosi4YtTQ== Uberspace.de (nicht loeschen, siehe Hinweis im Dashboard)

jannis701 avatar Dec 08 '23 10:12 jannis701

I am not super familiar with advanced configurations of sshd, but a quick web search found this superuser.com thread which suggests you could have many entries in the AuthorizedKeysFile setting. This could allow a central authorized_keys file with the dashboard key.

Not sure if there are some problems (e.g., also giving root access to this key) that prevent this from solving the problem?

jpbernius avatar Dec 08 '23 16:12 jpbernius