Page MenuHomeDevCentral
Files F3769252

No OneTemporary
Actions

View Options

diff --git a/README b/README
index c48d46c..e92e1e2 100644
--- a/README
+++ b/README
@@ -1,56 +1,59 @@
___ ___ ___ ___ ___
/ /\ / /\ /__/\ /__/| / /\
/ /::| / /:/_ | |::\ | |:| / /:/_
/ /:/:| / /:/ /\ | |:|:\ | |:| / /:/ /\
/ /:/|:|__ / /:/ /:/_ __|__|:|\:\ __| |:| / /:/ /:/_
/__/:/ |:| /\ /__/:/ /:/ /\ /__/::::| \:\ /__/\_|:|____ /__/:/ /:/ /\
\__\/ |:|/:/ \ \:\/:/ /:/ \ \:\~~\__\/ \ \:\/:::::/ \ \:\/:/ /:/
| |:/:/ \ \::/ /:/ \ \:\ \ \::/~~~~ \ \::/ /:/
| |::/ \ \:\/:/ \ \:\ \ \:\ \ \:\/:/
| |:/ \ \::/ \ \:\ \ \:\ \ \::/
|__|/ ___ \__\/ ___ \__\/ \__\/ ___ \__\/ ___
/ /\ /__/\ ___ /__/\ / /\
/ /::\ \ \:\ /__/| \ \:\ / /:/_
/ /:/\:\ \__\:\ | |:| \ \:\ / /:/ /\
/ /:/~/:/ ___ / /::\ | |:| _____\__\:\ / /:/ /:/_
/__/:/ /:/___ /__/\ /:/\:\ __|__|:| /__/::::::::\ /__/:/ /:/ /\
\ \:\/:::::/ \ \:\/:/__\/ /__/::::\ \ \:\~~\~~\/ \ \:\/:/ /:/
\ \::/~~~~ \ \::/ ~\~~\:\ \ \:\ ~~~ \ \::/ /:/
\ \:\ \ \:\ \ \:\ \ \:\ \ \:\/:/
\ \:\ \ \:\ \__\/ \ \:\ \ \::/
\__\/ \__\/ \__\/ \__\/
+ 2023-03-07: THIS PROJECT IS NOW ARCHIVED. HashiCorp Vault seems a better
+ way to handle credentials than Phabricator passphrase application.
+
Support tools for a Docker <--> Phabricator bridge.
This account is used by deployment scripts to build
Docker containers for exotic Nasqueron applications.
Available scripts:
------------------
* getconfig ........ retrieves a configuration file in rOPS
* getcredentials ... retrieves a credential stored on DevCentral
* getpublickeys .... fetches SSH public key allowed to use this account
* Makefile ......... runs getpublickeys to populate .ssh/authorized_keys
Data:
-----
The datasources are stored in the data/ folder.
* servers.json ..... the list of servers allowed to use this account
This file is currently provisionned by rOPS in the zemke-rhyne unit.
Authentication:
---------------
For each server needing to use this account, create a SSH key, store in
on DevCentral, give access to it to the NasqDDS group, allow retrieval
through conduit and update the servers.json file.
Reinstallation:
---------------
0. Ensure arc and jq are available on the server
1. Create a new unix account, 'zr'
2. Pull this repository directly in the home directory
3. Install an arc certificate in ~/.arcrc
4. Run 'make'

File Metadata

Mime Type
text/x-diff
Expires
Mon, Nov 25, 13:54 (1 d, 5 h)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2260283
Default Alt Text
(3 KB)

Event Timeline

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator