2020-07-23 16:29:43 +00:00
|
|
|
#!/bin/sh
|
|
|
|
|
grep HostCert /etc/ssh/sshd_config.anaconda >> /mnt/sysimage/etc/ssh/sshd_config
|
|
|
|
|
echo HostbasedAuthentication yes >> /mnt/sysimage/etc/ssh/sshd_config
|
|
|
|
|
echo HostbasedUsesNameFromPacketOnly yes >> /mnt/sysimage/etc/ssh/sshd_config
|
|
|
|
|
echo IgnoreRhosts no >> /mnt/sysimage/etc/ssh/sshd_config
|
2020-07-24 12:12:53 +00:00
|
|
|
sshconf=/mnt/sysimage/etc/ssh/ssh_config
|
2020-07-23 16:29:43 +00:00
|
|
|
if [ -d /mnt/sysimage/etc/ssh/ssh_config.d/ ]; then
|
|
|
|
|
sshconf=/mnt/sysimage/etc/ssh/ssh_config.d/01-confluent.conf
|
|
|
|
|
fi
|
|
|
|
|
echo 'Host *' >> $sshconf
|
|
|
|
|
echo ' HostbasedAuthentication yes' >> $sshconf
|
|
|
|
|
echo ' EnableSSHKeysign yes' >> $sshconf
|
|
|
|
|
echo ' HostbasedKeyTypes *ed25519*' >> $sshconf
|
|
|
|
|
|
|
|
|
|
cp /etc/ssh/ssh_host_* /mnt/sysimage/etc/ssh/
|
|
|
|
|
mkdir /mnt/sysimage/root/.ssh/
|
|
|
|
|
chmod 700 /mnt/sysimage/root/.ssh/
|
|
|
|
|
cp /root/.ssh/authorized_keys /mnt/sysimage/root/.ssh/
|
|
|
|
|
chmod 600 /mnt/sysimage/root/.ssh/authorized_keys
|
|
|
|
|
cp /etc/ssh/ssh_known_hosts /mnt/sysimage/etc/ssh/
|
2021-05-03 16:48:08 +00:00
|
|
|
curl -f -H "CONFLUENT_NODENAME: $nodename" -H "CONFLUENT_APIKEY: $(cat /etc/confluent/confluent.apikey)" https://$confluent_mgr/confluent-api/self/nodelist > /tmp/allnodes
|
2020-07-23 16:29:43 +00:00
|
|
|
cp /tmp/allnodes /mnt/sysimage/etc/ssh/shosts.equiv
|
|
|
|
|
cp /tmp/allnodes /mnt/sysimage/root/.shosts
|
