blob: 8c71bddae4e1d19a6bf04f773b74ee88033a0aa2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
#!/usr/bin/env bash
#
# This script syncs authorized keys (found in the $authorized_keys_file below)
# to a list of remote hosts. It does not touch existing keys unless overwrite
# is set to true, but creates a special section containing the keys.
declare -r begin_marker="### BEGIN MANAGED_BY_KJ_SYNC_AUTHORIZED_KEYS.SH ###"
declare -r end_marker="### END MANAGED_BY_KJ_SYNC_AUTHORIZED_KEYS.SH ###"
# If overwrite=true, the entire authorized_keys file is overwritten.
declare -r overwrite=false
declare -r tmpdir=$(mktemp -d /tmp/kj_sync_authorized_keys.XXXXX)
targets=(
shape
sabaki
semeai
dragon
root@orbekk.osl.trygveandre.net
#login.pvv.ntnu.no
gote.orbekk.com
)
authorized_keys_file=$HOME/dotfiles/authorized_keys
if [[ ! -f "${authorized_keys_file}" ]]; then
echo "could not find authorized_keys_file: ${authorized_keys_file}"
exit 1
fi
add_keys_to_file() {
local filename="$1"
awk \
"/$begin_marker/"' { exit 0 } { print }' \
${filename} > ${filename}.header
awk \
"/$end_marker/"' { should_output=1 } !'"/$end_marker/"' { if (should_output) { print } }' \
${filename} > ${filename}.footer
cat "${filename}.header" > ${filename}
echo "${begin_marker}" >> ${filename}
echo "# WARNING: ANY CHANGES WILL BE OVERWRITTEN" >> ${filename}
cat "$authorized_keys_file" >> ${filename}
echo "${end_marker}" >> ${filename}
cat "${filename}.footer" >> ${filename}
}
for target in ${targets[@]}; do
echo "syncing $target"
tmp="${tmpdir}/${target}"
touch ${tmp}
if [[ $overwrite != true ]]; then
ssh ${target} 'bash -c "cat .ssh/authorized_keys || echo -n"' > ${tmp}
fi
add_keys_to_file "${tmp}"
ssh ${target} 'mkdir -p .ssh'
cat "${tmp}" | ssh ${target} ' bash -c "cat > .ssh/authorized_keys.tmp && mv .ssh/authorized_keys{.tmp,}"'
done
|
