fgci-ansible icon indicating copy to clipboard operation
fgci-ansible copied to clipboard

Missing features - working sudo ssh to everything from the install-node

Open A1ve5 opened this issue 10 years ago • 3 comments

Reported by Ulf

A1ve5 avatar Dec 10 '15 15:12 A1ve5

Some clarification: On an FGI cluster one can run "sudo ssh cn1" and get root.

This is accomplished with a password-less ssh-key in /root/.ssh on the install node.

Should the key be password less also in FGCI? @tiggi

martbhell avatar Dec 15 '15 06:12 martbhell

On 2015-12-15 08:19, Johan Guldmyr wrote:

Some clarification: On an FGI cluster one can run "sudo ssh cn1" and get root.

This is accomplished with a password-less ssh-key in /root/.ssh on the install node.

Yes. It helps maintenance a lot.

Ulf Tigerstedt || Senior systems specialist CSC Oy || NeIC NT1 / NDGF GSM +358503818558 Johannesbergsvägen 17 || Närpes || Finland

tiggi avatar Dec 15 '15 08:12 tiggi

UEF has via support brought up adding keys to the root user. This is now possible by adding variable(hash) admin_root_keys. See roles/ansible-role-users/default/main.yml or this page: https://github.com/CSC-IT-Center-for-Science/ansible-role-users/blob/master/defaults/main.yml#L13-L15

The ansible-role-users is currently only applied in admin and install.yml playbooks.

martbhell avatar Feb 24 '16 06:02 martbhell