76 lines
2.4 KiB
Perl
Executable file
76 lines
2.4 KiB
Perl
Executable file
#!/usr/bin/perl -w
|
|
|
|
# documentation for this program is right here, please read
|
|
|
|
# IMPORTANT: also see usage notes below
|
|
|
|
# BACKGROUND/PURPOSE:
|
|
|
|
# - an external program populates "keydir" with *all* keys and then
|
|
# calls this program, giving "keydir" as arg-1
|
|
# - we then call gitolite.pm's "setup_authkeys" function to do its thing
|
|
|
|
# arg-1: keydir
|
|
|
|
# DISCUSSION:
|
|
#
|
|
# For now, we will assume *all* the keys are in the keydir passed. The
|
|
# setup_authkeys routine factored out from the old gl-compile-conf is not
|
|
# setup to take a partial set of keys and create the ~/.ssh/authorized_keys
|
|
# file.
|
|
#
|
|
# Also, there are issues to do with *deleted* keys that need to be taken care
|
|
# of.
|
|
#
|
|
# All in all, unless it is shown to be quite inefficient, I'd much prefer
|
|
# processing *all* keys each time there is a change.
|
|
|
|
use strict;
|
|
use warnings;
|
|
|
|
use FindBin;
|
|
BEGIN { $ENV{GL_BINDIR} = $FindBin::Bin; }
|
|
|
|
use lib $ENV{GL_BINDIR};
|
|
use gitolite_rc;
|
|
use gitolite;
|
|
|
|
use Getopt::Long;
|
|
my $batch = 0;
|
|
GetOptions('batch' => \$batch);
|
|
|
|
# prevent newbie from running it accidentally and clobbering his authkeys file!
|
|
unless ($batch) {
|
|
print STDERR "
|
|
This is a cronnable, batchable, program to rewrite ~/.ssh/authorized_keys
|
|
using public keys in a given directory. It MUST be run by supplying its
|
|
full path, and the rest of the gitolite scripts must be in the same
|
|
directory. Here's how to run it:
|
|
|
|
/full/path/to/gl-setup-authkeys -batch keydir
|
|
|
|
where 'keydir' contains a bunch of '*.pub' files.
|
|
|
|
If you're not sure what the full path to the script should be, look in
|
|
~/.ssh/authorized_keys for the path to the gl-auth-command script.
|
|
|
|
If you managed to lose that file (how careless of you!) then, depending on
|
|
what install mode you used, it's either \$HOME/.gitolite/src or \$HOME/bin
|
|
or /usr/local/bin or whatever your package maintainer decided. I leave it
|
|
to you to figure out which method gets you which PATH ;-) In this case
|
|
you'll also have to set GL_BINDIR to that same path *and* export it, so
|
|
something like this should do:
|
|
|
|
export GL_BINDIR=/that/full/path/you/just/found
|
|
\$GL_BINDIR/gl-setup-authkeys -batch keydir
|
|
|
|
The keydir can be found from the value of \$GL_KEYDIR in ~/.gitolite.rc\n\n";
|
|
exit 1;
|
|
}
|
|
|
|
# quick sanity check and run
|
|
my $keydir = shift or die "I need a directory name\n";
|
|
-d $keydir or die "$keydir should be a directory\n";
|
|
|
|
setup_authkeys($keydir);
|