forked from shankerbalan/cloudstack-scripts
-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathcloud-set-guest-sshkey-centos
executable file
·100 lines (85 loc) · 2.51 KB
/
cloud-set-guest-sshkey-centos
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
#!/bin/bash
#
# cloud-set-guest-sshkey SSH Public Keys Download Client
#
# chkconfig: 2345 98 02
# description: SSH Public Keys Download Client
#
# Modify this line to specify the user (default is root)
user=root
### BEGIN INIT INFO
# Provides: cloud-set-guest-sshkey
# Required-Start: $local_fs $network $sshd
# Required-Stop: $local_fs $syslog
# Should-Start: $syslog
# Should-Stop: $network $syslog
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description:
# Description: SSH Public Keys Download Client
### END INIT INFO
# Source function library.
. /etc/rc.d/init.d/functions
# Add your DHCP lease folders here
DHCP_FOLDERS="/var/lib/dhclient/*"
keys_received=0
file_count=0
function cloud_set_guest_sshkey() {
for DHCP_FILE in $DHCP_FOLDERS; do
if [ -f $DHCP_FILE ]; then
file_count=$((file_count+1))
SSHKEY_SERVER_IP=$(grep dhcp-server-identifier $DHCP_FILE | tail -1 | awk '{print $NF}' | tr -d '\;')
if [ -n $SSHKEY_SERVER_IP ]; then
logger -t "cloud" "Sending request to ssh key server at $SSHKEY_SERVER_IP"
publickey=$(wget -t 3 -T 20 -O - http://$SSHKEY_SERVER_IP/latest/public-keys 2>/dev/null)
if [ $? -eq 0 ]; then
logger -t "cloud" "Got response from server at $SSHKEY_SERVER_IP"
keys_received=1
break
fi
else
logger -t "cloud" "Could not find ssh key server IP in $DHCP_FILE"
fi
fi
done
# did we find the keys anywhere?
if [ "$keys_received" == "0" ]; then
logger -t "cloud" "Failed to get ssh keys from any server"
exit 1
fi
# set ssh public key
homedir=$(grep ^$user /etc/passwd|awk -F ":" '{print $6}')
sshdir=$homedir/.ssh
authorized=$sshdir/authorized_keys
if [ ! -e $sshdir ]; then
mkdir $sshdir
fi
if [ ! -e $authorized ]; then
touch $authorized
fi
if [ `grep -c "$publickey" $authorized` == 0 ]; then
echo "$publickey" >> $authorized
/sbin/restorecon -R $homedir/.ssh
fi
}
# See how we were called.
case "$1" in
start)
action $"Starting cloud-set-guest-sshkey: " /bin/true
cloud_set_guest_sshkey
RETVAL=$?
;;
stop)
action $"Shutting down cloud-set-guest-sshkey: " /bin/true
RETVAL=$?
;;
restart)
$0 stop
$0 start
;;
*)
echo $"Usage: cloud-set-guest-sshey {start}"
RETVAL=2
;;
esac
exit $RETVAL