Arturo Rinaldi artynet

Better SSH Authorized Keys Management

A seemingly common problem that people encounter is how to handle all of your users authorized_keys file.

People struggle over management, ensuring that users only have specific keys in the authorized_keys file or even a method for expiring keys. A centralized key management system could help provide all of this functionality with a little scripting.

One piece of functionality overlooked in OpenSSH is the AuthorizedKeysCommand configuration keyword. This configuration allows you to specify a command that will run during login to retrieve a users public key file from a remote source and perform validation just as if the authorized_keys file was local.

Here is an example directory structure for a set of users with SSH public keys that can be shared out via a web server:

In this article, I will share some of my experience on installing NVIDIA driver and CUDA on Linux OS. Here I mainly use Ubuntu as example. Comments for CentOS/Fedora are also provided as much as I can.

	#!/bin/sh

	if [ "$#" -ne 1 ]; then
	echo "Example: ${0} [email protected]"
	exit 1
	fi

	cat ~/.ssh/id_rsa.pub \| ssh ${1} "cat >> /etc/dropbear/authorized_keys && chmod 0600 /etc/dropbear/authorized_keys && chmod 0700 /etc/dropbear"

	#!/usr/bin/env bash

	# TODO: case user conf; rm `sleep` shenaynays

	# Logs
	logTime=$(date +%Y-%m-%d:%H:%M:%S)
	uninstallLog="/tmp/$(basename "$0" \| cut -d. -f1)_$logTime.log"
	exec &> >(tee -a "$uninstallLog")

	# Current user

	#!/bin/bash
	#
	# Startup script for the Apache Web Server
	#
	# chkconfig: - 85 15
	# description: Apache is a World Wide Web server. It is used to serve \
	# HTML files and CGI.
	# processname: httpd
	# pidfile: /usr/local/apache2/logs/httpd.pid
	# config: /usr/local/apache2/conf/httpd.conf

	#!/bin/bash
	#
	# tomcatd Start Tomcat server
	#
	# chkconfig: - 80 20
	# description: Tomcat Web Application Server
	#
	# processname: tomcat
	# pidfile: /var/run/tomcat.pid

	sudo update-alternatives --install /usr/bin/appletviewer appletviewer /usr/lib/jvm/jdk1.8.0_102/bin/appletviewer 180
	sudo update-alternatives --install /usr/bin/extcheck extcheck /usr/lib/jvm/jdk1.8.0_102/bin/extcheck 180
	sudo update-alternatives --install /usr/bin/idlj idlj /usr/lib/jvm/jdk1.8.0_102/bin/idlj 180
	sudo update-alternatives --install /usr/bin/jar jar /usr/lib/jvm/jdk1.8.0_102/bin/jar 180
	sudo update-alternatives --install /usr/bin/jarsigner jarsigner /usr/lib/jvm/jdk1.8.0_102/bin/jarsigner 180
	sudo update-alternatives --install /usr/bin/java java /usr/lib/jvm/jdk1.8.0_102/jre/bin/java 180
	sudo update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/jdk1.8.0_102/bin/javac 180
	sudo update-alternatives --install /usr/bin/javadoc javadoc /usr/lib/jvm/jdk1.8.0_102/bin/javadoc 180
	sudo update-alternatives --install /usr/bin/javafxpackager javafxpackager /usr/lib/jvm/jdk1.8.0_102/bin/javafxpackager 180
	sudo update-alternatives --install /usr/bin/javah javah /usr/lib/jvm/jdk1.8.0_102/bin/javah 1

	name=jdk1.8.0_102
	alias=oracle-jdk1.8
	priority=180
	section=main

	hl rmid /usr/lib/jvm/jdk1.8.0_102/jre/bin/rmid
	hl java /usr/lib/jvm/jdk1.8.0_102/jre/bin/java
	hl keytool /usr/lib/jvm/jdk1.8.0_102/jre/bin/keytool
	hl pack200 /usr/lib/jvm/jdk1.8.0_102/jre/bin/pack200
	hl rmiregistry /usr/lib/jvm/jdk1.8.0_102/jre/bin/rmiregistry

	#!bash
	#
	# bash/zsh completion support for core Git.
	#
	# Copyright (C) 2006,2007 Shawn O. Pearce <[email protected]>
	# Conceptually based on gitcompletion (http://gitweb.hawaga.org.uk/).
	# Distributed under the GNU General Public License, version 2.0.
	#
	# The contained completion routines provide support for completing:
	#

	From 5e1cb0b78142bf7ed7d348f4a47c236590e72b57 Mon Sep 17 00:00:00 2001
	From: MilhouseVH <[email protected]>
	Date: Mon, 27 Nov 2017 20:48:13 +0000
	Subject: [PATCH] kernel 4.15 fix

	---
	kernel/nv.c \| 10 ++++------
	1 file changed, 4 insertions(+), 6 deletions(-)

	diff --git a/kernel/nv.c b/kernel/nv.c

Arturo Rinaldi artynet

Better SSH Authorized Keys Management

Table of Contents