Skip to content

ssh-access

A task to put root ssh keys in place

This task populates the root's authorized keys file and makes sure that the sshd config for PermitRootLogin is populated.

Runs as part of a shell script for kickstart or net-post-install.

If the access-ssh-template is specified, that template is used to replace the existing sshd config file.

Otherwise, the task will use the access-keys, access-keys-shared, and access-keys-global parameters to define keys to inject into the authorized_keys file for root.

The access-ssh-root-mode and access-ssh-parameters will alter the sshd config file. The access-ssh-parameters parameter is a general key/value map to replace config sections.

Optional Parameters: * access-keys * access-keys-shared * access-keys-global * access-ssh-root-mode * access-ssh-parameters * access-ssh-template

Parameter YAML format:

::

Text Only
access-keys:
  greg:  ssh-rsa key
  greg2:  ssh-rsa key
access-ssh-root-mode: "without-password|yes|no|forced-commands-only"

Defaults: * access-keys - empty * access-ssh-root-mode - defaults to "without-password" if unspecified

Objects that Reference ssh-access

Objects used by ssh-access