diff --git a/.gitignore b/.gitignore index 84d4160..6a1708f 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,3 @@ .* +!.keep *.log diff --git a/README b/README index 4e7425f..c48d46c 100644 --- a/README +++ b/README @@ -1,52 +1,56 @@ ___ ___ ___ ___ ___ / /\ / /\ /__/\ /__/| / /\ / /::| / /:/_ | |::\ | |:| / /:/_ / /:/:| / /:/ /\ | |:|:\ | |:| / /:/ /\ / /:/|:|__ / /:/ /:/_ __|__|:|\:\ __| |:| / /:/ /:/_ /__/:/ |:| /\ /__/:/ /:/ /\ /__/::::| \:\ /__/\_|:|____ /__/:/ /:/ /\ \__\/ |:|/:/ \ \:\/:/ /:/ \ \:\~~\__\/ \ \:\/:::::/ \ \:\/:/ /:/ | |:/:/ \ \::/ /:/ \ \:\ \ \::/~~~~ \ \::/ /:/ | |::/ \ \:\/:/ \ \:\ \ \:\ \ \:\/:/ | |:/ \ \::/ \ \:\ \ \:\ \ \::/ |__|/ ___ \__\/ ___ \__\/ \__\/ ___ \__\/ ___ / /\ /__/\ ___ /__/\ / /\ / /::\ \ \:\ /__/| \ \:\ / /:/_ / /:/\:\ \__\:\ | |:| \ \:\ / /:/ /\ / /:/~/:/ ___ / /::\ | |:| _____\__\:\ / /:/ /:/_ /__/:/ /:/___ /__/\ /:/\:\ __|__|:| /__/::::::::\ /__/:/ /:/ /\ \ \:\/:::::/ \ \:\/:/__\/ /__/::::\ \ \:\~~\~~\/ \ \:\/:/ /:/ \ \::/~~~~ \ \::/ ~\~~\:\ \ \:\ ~~~ \ \::/ /:/ \ \:\ \ \:\ \ \:\ \ \:\ \ \:\/:/ \ \:\ \ \:\ \__\/ \ \:\ \ \::/ \__\/ \__\/ \__\/ \__\/ Support tools for a Docker <--> Phabricator bridge. This account is used by deployment scripts to build Docker containers for exotic Nasqueron applications. Available scripts: ------------------ * getconfig ........ retrieves a configuration file in rOPS * getcredentials ... retrieves a credential stored on DevCentral * getpublickeys .... fetches SSH public key allowed to use this account * Makefile ......... runs getpublickeys to populate .ssh/authorized_keys Data: ----- + The datasources are stored in the data/ folder. + * servers.json ..... the list of servers allowed to use this account + This file is currently provisionned by rOPS in the zemke-rhyne unit. + Authentication: --------------- For each server needing to use this account, create a SSH key, store in on DevCentral, give access to it to the NasqDDS group, allow retrieval through conduit and update the servers.json file. Reinstallation: --------------- 0. Ensure arc and jq are available on the server 1. Create a new unix account, 'zr' 2. Pull this repository directly in the home directory 3. Install an arc certificate in ~/.arcrc 4. Run 'make' diff --git a/data/.keep b/data/.keep new file mode 100644 index 0000000..e69de29 diff --git a/data/servers.json b/data/servers.json deleted file mode 100644 index c562286..0000000 --- a/data/servers.json +++ /dev/null @@ -1,10 +0,0 @@ -[{ - "key": "2", - "allowedConnectionFrom": [ - "172.27.26.49", - "dwellers.nasqueron.drake", - "dwellers.nasqueron.org" - ], - "restrictCommand": null, - "comment": "Zemke-Rhyne" -}]