149 lines
4.6 KiB
Diff
149 lines
4.6 KiB
Diff
|
From cdfeb278ab4d4b6a9d848e1b9accc3554e4ac6eb Mon Sep 17 00:00:00 2001
|
||
|
From: Dave Young <dyoung@redhat.com>
|
||
|
Date: Mon, 26 Dec 2011 14:29:21 +0800
|
||
|
Subject: [PATCH] Add ssh client module code
|
||
|
|
||
|
Add ssh client module which support ssh key mode and interactive mode.
|
||
|
with --sshkey option you can provide the ssh key to be installed
|
||
|
|
||
|
>why not call it "ssh" module?
|
||
|
ssh-client is better, maybe future there will be ssh-server come in.
|
||
|
In debian these are also two different packages.
|
||
|
|
||
|
Usage:
|
||
|
1. sshkey mode:
|
||
|
transfer your public key to remote machine with ssh-copy-id or do it mannaully
|
||
|
example of options:
|
||
|
./dracut -l -H -a ssh-client --sshkey /root/.ssh/id_rsa i.img
|
||
|
2. interactive mode:
|
||
|
need use --ctty option, ie.:
|
||
|
./dracut -l -H -a ssh-client --ctty i.img
|
||
|
|
||
|
[v2 changes]:
|
||
|
per wangcong: add patch description about module name
|
||
|
add help line in usage()
|
||
|
remove useless comment
|
||
|
|
||
|
Signed-off-by: Dave Young <dyoung@redhat.com>
|
||
|
---
|
||
|
dracut | 4 ++-
|
||
|
dracut.8.xml | 8 ++++
|
||
|
modules.d/95ssh-client/module-setup.sh | 60 ++++++++++++++++++++++++++++++++
|
||
|
3 files changed, 71 insertions(+), 1 deletions(-)
|
||
|
create mode 100644 modules.d/95ssh-client/module-setup.sh
|
||
|
|
||
|
diff --git a/dracut b/dracut
|
||
|
index 3c21561..d0c335b 100755
|
||
|
--- a/dracut
|
||
|
+++ b/dracut
|
||
|
@@ -118,6 +118,7 @@ Creates initial ramdisk images for preloading modules
|
||
|
-M, --show-modules Print included module's name to standard output during
|
||
|
build.
|
||
|
--keep Keep the temporary initramfs for debugging purposes
|
||
|
+ --sshkey [SSHKEY] Add ssh key to initramfs (use with ssh-client module)
|
||
|
EOF
|
||
|
}
|
||
|
|
||
|
@@ -233,6 +234,7 @@ while (($# > 0)); do
|
||
|
--debug) debug="yes";;
|
||
|
--profile) profile="yes";;
|
||
|
--ctty) cttyhack="yes";;
|
||
|
+ --sshkey) read_arg sshkey "$@" || shift;;
|
||
|
-v|--verbose) ((verbosity_mod_l++));;
|
||
|
-q|--quiet) ((verbosity_mod_l--));;
|
||
|
-l|--local) allowlocal="yes" ;;
|
||
|
@@ -588,7 +590,7 @@ export initdir dracutbasedir dracutmodules drivers \
|
||
|
add_drivers mdadmconf lvmconf filesystems \
|
||
|
use_fstab libdir usrlibdir fscks nofscks cttyhack \
|
||
|
stdloglvl sysloglvl fileloglvl kmsgloglvl logfile \
|
||
|
- debug host_fs_types host_devs
|
||
|
+ debug host_fs_types host_devs sshkey
|
||
|
|
||
|
# Create some directory structure first
|
||
|
[[ $prefix ]] && mkdir -m 0755 -p "${initdir}${prefix}"
|
||
|
diff --git a/dracut.8.xml b/dracut.8.xml
|
||
|
index 955d4d2..5a5df54 100644
|
||
|
--- a/dracut.8.xml
|
||
|
+++ b/dracut.8.xml
|
||
|
@@ -370,6 +370,14 @@ Default:
|
||
|
</varlistentry>
|
||
|
<varlistentry>
|
||
|
<term>
|
||
|
+ <option>--sshkey <replaceable><sshkey file></replaceable></option>
|
||
|
+ </term>
|
||
|
+ <listitem>
|
||
|
+ <para>ssh key file used with ssh-client module.</para>
|
||
|
+ </listitem>
|
||
|
+ </varlistentry>
|
||
|
+ <varlistentry>
|
||
|
+ <term>
|
||
|
<option>-l</option>
|
||
|
</term>
|
||
|
<term>
|
||
|
diff --git a/modules.d/95ssh-client/module-setup.sh b/modules.d/95ssh-client/module-setup.sh
|
||
|
new file mode 100644
|
||
|
index 0000000..0ffc298
|
||
|
--- /dev/null
|
||
|
+++ b/modules.d/95ssh-client/module-setup.sh
|
||
|
@@ -0,0 +1,60 @@
|
||
|
+#!/bin/bash
|
||
|
+# -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
|
||
|
+# ex: ts=8 sw=4 sts=4 et filetype=sh
|
||
|
+
|
||
|
+# fixme: assume user is root
|
||
|
+
|
||
|
+check() {
|
||
|
+ # If our prerequisites are not met, fail.
|
||
|
+ type -P ssh >/dev/null || return 1
|
||
|
+ type -P scp >/dev/null || return 1
|
||
|
+ if [[ $sshkey ]]; then
|
||
|
+ [ ! -f $sshkey ] && {
|
||
|
+ derror "sshkey is not found!"
|
||
|
+ return 1
|
||
|
+ }
|
||
|
+ [[ ! $cttyhack = yes ]] && {
|
||
|
+ dinfo "--ctty is not used, you should make sure the machine is knowhost and copy the sshkey to remote machine!"
|
||
|
+ }
|
||
|
+ else
|
||
|
+ [[ ! $cttyhack = yes ]] && {
|
||
|
+ derror "ssh interactive mode need option --ctty!"
|
||
|
+ return 1
|
||
|
+ }
|
||
|
+ fi
|
||
|
+
|
||
|
+ return 0
|
||
|
+}
|
||
|
+
|
||
|
+depends() {
|
||
|
+ # We depend on network modules being loaded
|
||
|
+ echo network
|
||
|
+}
|
||
|
+
|
||
|
+inst_sshenv()
|
||
|
+{
|
||
|
+ if [ -d /root/.ssh ]; then
|
||
|
+ inst_dir /root/.ssh
|
||
|
+ chmod 700 ${initdir}/root/.ssh
|
||
|
+ fi
|
||
|
+
|
||
|
+ # Copy over ssh key and knowhosts if needed
|
||
|
+ [[ $sshkey ]] && {
|
||
|
+ inst $sshkey
|
||
|
+ [[ -f /root/.ssh/known_hosts ]] && inst /root/.ssh/known_hosts
|
||
|
+ [[ -f /etc/ssh/ssh_known_hosts ]] && inst /etc/ssh/ssh_known_hosts
|
||
|
+ }
|
||
|
+
|
||
|
+ # Copy over root and system-wide ssh configs.
|
||
|
+ [[ -f /root/.ssh/config ]] && inst /root/.ssh/config
|
||
|
+ [[ -f /etc/ssh/ssh_config ]] && inst /etc/ssh/ssh_config
|
||
|
+
|
||
|
+ return 0
|
||
|
+}
|
||
|
+
|
||
|
+install() {
|
||
|
+ inst ssh
|
||
|
+ inst scp
|
||
|
+ inst_sshenv
|
||
|
+}
|
||
|
+
|