Skip to content
This repository has been archived by the owner on Jun 29, 2022. It is now read-only.

Commit

Permalink
packet: disable syncing allowed SSH keys on nodes
Browse files Browse the repository at this point in the history
This commit disables syncing authorized SSH keys for core user on nodes
from Packet's user's keys and project's keys, so only keys which are
specified in the Lokomotive configuration are actually authorized, as
having more keys allowed than specified in the configuration might be a
potential security threat.

Closes #465

Signed-off-by: Mateusz Gozdek <mateusz@kinvolk.io>
  • Loading branch information
invidian committed May 28, 2020
1 parent 833ee49 commit 3f5fc1e
Show file tree
Hide file tree
Showing 3 changed files with 8 additions and 4 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,8 @@ systemd:
enable: true
- name: locksmithd.service
mask: true
- name: coreos-metadata-sshkeys@core.service
mask: true
- name: wait-for-dns.service
enable: true
contents: |
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,8 @@ systemd:
enable: true
- name: locksmithd.service
mask: true
- name: coreos-metadata-sshkeys@core.service
mask: true
- name: wait-for-dns.service
enable: true
contents: |
Expand Down
Loading

0 comments on commit 3f5fc1e

Please sign in to comment.