Revert "basessh/distgit: adjust the way ssh is configured for distgit"

This is still being reviewed and wasn't meant to be pushed out yet

This reverts commit 67844b4504.
This commit is contained in:
Pierre-Yves Chibon 2021-04-03 19:10:43 +02:00
parent 9f335edcac
commit 00804542f3
3 changed files with 0 additions and 24 deletions

View file

@ -51,13 +51,8 @@ AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
AcceptEnv XMODIFIERS AcceptEnv XMODIFIERS
{% if sshd_keyhelper %} {% if sshd_keyhelper %}
{% if inventory_hostname.startswith('pkgs') %}
AuthorizedKeysCommandUser nobody
AuthorizedKeysCommand /usr/local/bin/ssh_wrapper "%u"
{% else %}
AuthorizedKeysCommandUser git AuthorizedKeysCommandUser git
AuthorizedKeysCommand /usr/libexec/pagure/keyhelper.py "%u" "%h" "%t" "%f" AuthorizedKeysCommand /usr/libexec/pagure/keyhelper.py "%u" "%h" "%t" "%f"
{% endif %}
{% else %} {% else %}
AuthorizedKeysCommandUser nobody AuthorizedKeysCommandUser nobody
AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys

View file

@ -1,7 +0,0 @@
#!/bin/sh
/usr/bin/sss_ssh_authorizedkeys $1 | while read -r key
do
echo "command=\"PAGURE_CONFIG=/etc/pagure/pagure_hook.cfg HOME=/srv/git/ /usr/libexec/pagure/aclchecker.py $1\", $key"
done

View file

@ -106,18 +106,6 @@
tags: tags:
- distgit - distgit
# -- SSH
# We use a wrapper to let packager ssh in while restricting the command they can
# do, this installs that wrapper (which is otherwise configured in sshd_config)
- name: install the ssh_wrapper wrapper script
copy: src=ssh_wrapper dest=/usr/local/bin/ssh_wrapper mode=0755
tags:
- config
- distgit
- ssh
- basessh
# -- Dist Git -------------------------------------------- # -- Dist Git --------------------------------------------
# This is the Git setup itself: group, root directory, scripts,... # This is the Git setup itself: group, root directory, scripts,...
- name: install dist-git - name: install dist-git