Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-04-20 15:35:55 -04:00
Code Issues Packages Projects Releases Wiki Activity

cli: write known_hosts file

Browse Source
This commit is contained in:
miampf 2025-04-03 17:59:10 +02:00
parent df3ed93e50
commit 5b8df37448
No known key found for this signature in database
GPG Key ID: EF039364B5B6886C
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
cli/internal/cmd/ssh.go
View File

@ -74,7 +74,10 @@ func writeCertificateForKey(cmd *cobra.Command, keyPath string, fh file.Handler,
return fmt.Errorf("generating SSH emergency CA key: %s", err)
}
debugLogger.Debug("SSH CA KEY generated", "public-key", string(ssh.MarshalAuthorizedKey(ca.PublicKey())))
marshalledKey := string(ssh.MarshalAuthorizedKey(ca.PublicKey()))
debugLogger.Debug("SSH CA KEY generated", "public-key", marshalledKey)
knownHostsContent := fmt.Sprintf("@cert-authority * %s", marshalledKey)
fh.Write("./known_hosts", []byte(knownHostsContent), file.OptMkdirAll)
keyBuffer, err := fh.Read(keyPath)
if err != nil {

3
docs/docs/workflows/troubleshooting.md
View File

@ -177,7 +177,7 @@ Emergency SSH access to nodes can be useful to diagnose issues or download impor
3. Now you can connect to any Constellation node using your certificate and your private key.
```bash
ssh -o CertificateFile=constellation_cert.pub -i <your private key> root@<ip of constellation node>
ssh -o CertificateFile=constellation_cert.pub -o UserKnownHostsFile=./known_hosts -i <your private key> root@<ip of constellation node>
```
Normally, you don't have access to the Constellation nodes since they reside in a private network.
@ -192,6 +192,7 @@ Emergency SSH access to nodes can be useful to diagnose issues or download impor
IdentityFile <your private key>
PreferredAuthentications publickey
CertificateFile=constellation_cert.pub
UserKnownHostsFile=./known_hosts
User root
ProxyJump <LB domain name>
```