mirror of
https://gitlab.archlinux.org/archlinux/aurweb.git
synced 2025-02-03 10:43:03 +01:00
Remove the OpenSSH patch
Extended AuthorizedKeysCommand parameters are now officially supported by OpenSSH. Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>
This commit is contained in:
parent
75923205af
commit
42b9e4dd28
3 changed files with 18 additions and 1120 deletions
41
INSTALL
41
INSTALL
|
@ -23,33 +23,22 @@ Setup on Arch Linux
|
||||||
|
|
||||||
$ /srv/http/aurweb/scripts/git-integration/gen-templates.py
|
$ /srv/http/aurweb/scripts/git-integration/gen-templates.py
|
||||||
|
|
||||||
6) Clone the OpenSSH project, apply the aurweb sshd patch and run `make`:
|
6) Create a new user:
|
||||||
|
|
||||||
$ cd /srv/http/aurweb/
|
|
||||||
$ git clone git://anongit.mindrot.org/openssh.git
|
|
||||||
$ cd openssh
|
|
||||||
$ git checkout V_6_8_P1
|
|
||||||
$ git am ../scripts/git-integration/0001-Patch-sshd-for-the-AUR.patch
|
|
||||||
$ autoreconf
|
|
||||||
$ ./configure
|
|
||||||
$ make
|
|
||||||
|
|
||||||
7) Create and edit the sshd configuration:
|
|
||||||
|
|
||||||
$ cd /srv/http/aurweb/
|
|
||||||
$ umask 077
|
|
||||||
$ mkdir .ssh/
|
|
||||||
$ ssh-keygen -f .ssh/ssh_host_rsa_key -N '' -t rsa
|
|
||||||
$ cp scripts/git-integration/sshd_config .ssh/
|
|
||||||
|
|
||||||
8) Create a new user and change ownership of the .ssh directory:
|
|
||||||
|
|
||||||
# useradd -U -d /srv/http/aurweb -c 'AUR user' aur
|
# useradd -U -d /srv/http/aurweb -c 'AUR user' aur
|
||||||
# chown aur:aur /srv/http/aurweb/.ssh/
|
|
||||||
|
|
||||||
9) Add, enable and start systemd unit files for the new sshd:
|
7) Install the git-auth wrapper script:
|
||||||
|
|
||||||
|
# cd /srv/http/aurweb/scripts/git-integration/
|
||||||
|
# cp git-auth.sh /usr/local/bin/aur-git-auth
|
||||||
|
# chmod 755 /usr/local/bin/aur-git-auth
|
||||||
|
|
||||||
|
8) Configure sshd(8) for the AUR. Add the following lines at the end of your
|
||||||
|
sshd_config(5) and restart the sshd. Note that OpenSSH 6.9 or newer is
|
||||||
|
needed!
|
||||||
|
|
||||||
|
Match User aur
|
||||||
|
PasswordAuthentication no
|
||||||
|
AuthorizedKeysCommand /usr/local/bin/aur-git-auth "%t" "%k"
|
||||||
|
AuthorizedKeysCommandUser aur
|
||||||
|
|
||||||
# cp /srv/http/aurweb/conf/aur-sshd.socket /etc/systemd/system/
|
|
||||||
# cp /srv/http/aurweb/conf/aur-sshd@.service /etc/systemd/system/
|
|
||||||
# systemctl enable aur-sshd.socket
|
|
||||||
# systemctl start aur-sshd.socket
|
|
||||||
|
|
File diff suppressed because it is too large
Load diff
3
scripts/git-integration/git-auth.sh
Executable file
3
scripts/git-integration/git-auth.sh
Executable file
|
@ -0,0 +1,3 @@
|
||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
/srv/http/aurweb/scripts/git-integration/git-auth.py "$1" "$2"
|
Loading…
Add table
Reference in a new issue