Re: [PATCH v3 3/6] virsh: Expose OpenSSH authorized key file mgmt APIs

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Nov 18, 2020 at 14:34:21 +0100, Michal Privoznik wrote:
> The new virsh commands are:
> 
>   get-user-sshkeys
>   set-user-sshkeys
> 
> Signed-off-by: Michal Privoznik <mprivozn@xxxxxxxxxx>
> ---
>  docs/manpages/virsh.rst |  38 ++++++++++
>  tools/virsh-domain.c    | 164 ++++++++++++++++++++++++++++++++++++++++
>  2 files changed, 202 insertions(+)
> 
> diff --git a/docs/manpages/virsh.rst b/docs/manpages/virsh.rst
> index bfd26e3120..543f62d429 100644
> --- a/docs/manpages/virsh.rst
> +++ b/docs/manpages/virsh.rst

[...]

> @@ -4004,6 +4019,29 @@ For QEMU/KVM, this requires the guest agent to be configured
>  and running.
>  
>  
> +set-user-sshkeys
> +----------------
> +
> +**Syntax:**
> +
> +::
> +
> +   set-user-sshkeys domain user [--file FILE] [{--reset | --remove}]
> +
> +Append keys read from *FILE* into *user*'sSSH authorized keys file in the guest

s/sS/s S/

> +*domain*.  In the *FILE* keys must be on separate lines and each line must
> +follow authorized keys format as defined by *sshd(8)*.
> +
> +If *--reset* is specified, then the guest authorized keys file content is
> +removed before appending new keys. As a special case, if *--reset* is provided
> +and no *FILE* was provided then no new keys are added and the authorized keys
> +file is cleared out.
> +
> +If *--remove* is specified, then instead of adding any new keys then keys read
> +from *FILE* are removed from the authorized keys file. It is not considered an
> +error if the key does not exist in the file.

Reviewed-by: Peter Krempa <pkrempa@xxxxxxxxxx>




[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]

  Powered by Linux