mirror of
https://github.com/xcat2/confluent.git
synced 2024-11-25 11:01:09 +00:00
d17b1d060c
The 'profile' variable notably induces dracut to be excruciatingly slow, mitigate chance by putting confluent before apikey, mgr, and profile. Further, it has been requested to have the scripts use same name on server for directory moving forward. Implement this request while allowing existing OS profiles to keep working.
24 lines
1.1 KiB
Bash
24 lines
1.1 KiB
Bash
#!/bin/sh
|
|
grep HostCert /etc/ssh/sshd_config.anaconda >> /mnt/sysimage/etc/ssh/sshd_config
|
|
echo HostbasedAuthentication yes >> /mnt/sysimage/etc/ssh/sshd_config
|
|
echo HostbasedUsesNameFromPacketOnly yes >> /mnt/sysimage/etc/ssh/sshd_config
|
|
echo IgnoreRhosts no >> /mnt/sysimage/etc/ssh/sshd_config
|
|
sshconf=/mnt/sysimage/etc/ssh/ssh_config
|
|
if [ -d /mnt/sysimage/etc/ssh/ssh_config.d/ ]; then
|
|
sshconf=/mnt/sysimage/etc/ssh/ssh_config.d/01-confluent.conf
|
|
fi
|
|
echo 'Host *' >> $sshconf
|
|
echo ' HostbasedAuthentication yes' >> $sshconf
|
|
echo ' EnableSSHKeysign yes' >> $sshconf
|
|
echo ' HostbasedKeyTypes *ed25519*' >> $sshconf
|
|
|
|
cp /etc/ssh/ssh_host_* /mnt/sysimage/etc/ssh/
|
|
mkdir /mnt/sysimage/root/.ssh/
|
|
chmod 700 /mnt/sysimage/root/.ssh/
|
|
cp /root/.ssh/authorized_keys /mnt/sysimage/root/.ssh/
|
|
chmod 600 /mnt/sysimage/root/.ssh/authorized_keys
|
|
cp /etc/ssh/ssh_known_hosts /mnt/sysimage/etc/ssh/
|
|
curl -f -H "CONFLUENT_NODENAME: $nodename" -H "CONFLUENT_APIKEY: $(cat /etc/confluent/confluent.apikey)" https://$confluent_mgr/confluent-api/self/nodelist > /tmp/allnodes
|
|
cp /tmp/allnodes /mnt/sysimage/etc/ssh/shosts.equiv
|
|
cp /tmp/allnodes /mnt/sysimage/root/.shosts
|