MINI-BUI...-COMMAND(8)

📦 version 1.9.99, in ubuntu jammy

💖 NAME 💖

mini-buildd-ssh-client-command — a lil script you drop in as the command in an authorized_key file so that mini-buildd-api runs happen only over SSH. bestie it's a bouncer but for ssh keys 💅

✨ DESCRIPTION ✨

okay so here's the whole vibe, the usage line is literally:

mini-buildd-ssh-client-command [-h] [--version] [-v] [-q]

Same thing again but make it cute: it's a Script to use as a command in an authorized_key file to allow mini-buildd-api runs only via SSH. 🦋

🎀 options: 🎀

  • -h, --help — show this help message and exit. classic. iconic. the "what do I do here" button 🫶
  • --version — show program's version number and exit. say hi to the version real quick, then bounce 💅
  • -v, --verbose — increase log level. Give it twice for max logs (default: 0). yes girl, make it loud 📢
  • -q, --quiet — decrease log level. Give it twice for min logs (default: 0). shhhh 🤫 minimal noise only

You may use this to authorize certain roles (for now: superuser and staff) via plain secure SSH. no cap, that's the whole point.

🌸 Steps to install: 🌸

1. As user root:

adduser --disabled-password mini-buildd-admin adduser
--disabled-password mini-buildd-staff # OPTIONAL: Allows 'auth
log' with the fingerprint adduser mini-buildd-admin adm adduser
mini-buildd-staff adm

2. As mini-buildd-[staff|uploader]:

Set up ~/.dput.cf with exactly one mini-buildd target.  Configure
python-keyring to use a plaintext keyring, see
"/usr/share/doc/mini-buildd/examples/keyringrc.cfg" Run once to
save the password:

$ mini-buildd-api admin|staff@TARGET status

3. As admin user at the mini-buildd instance (web app):

Generate appropriate django pseudo users ("admin" does already
exist).

4. To authorize a SSH Key, as user mini-buildd-uploader, add a line like this:

command="/usr/sbin/mini-buildd-ssh-client-command" ssh-rsa AA...

per ssh user key. one line per key, keep it tidy bestie 🎀

5. As SSH user:

Run 'ssh mini-buildd-[admin|staff]@your.host.name mini-buildd-api
-x -z -y
ngl the ordering here is doing the most, so go top to bottom and don't skip steps. the # OPTIONAL: line really is optional, fr fr. 🙈

mini-buildd-ssh-client-command ... that's the page, and this whole thing came out back in March 2022 under System Administration Utilities 💜 stay secure, stay slaying ✨👑

📦 where this page comes from