Page MenuHomeVyOS Platform

Ability to store SSH keys out of the config
Open, HighPublicENHANCEMENT

Description

We need to have ability to store ssh keys outside of config
for that purpose we can create subdir in /config for that purpose

and use sshd configuration
like

AuthorizedKeysFile /config/ssh/%u

The following tokens are defined:

%u is replaced by the username of the user

Details

Version
1.2
Is it a breaking change?
Perfectly compatible
Issue type
Feature (new functionality)

Event Timeline

syncer added a subscriber: dmbaturin.

This one is partially related to T312 but not only
we had some discussions with @dmbaturin in past about keys
and came across idea that it will be great to keep keys outside of config

Actually I like the fact to have the users SSH pub key inside the config. This makes it super handy to just copy/paste a users config entry arround VyOS instances.

Cisco/Ubiquity uses the same approach, User SSH keys are located inside running-config.

That is not something that we need to choose between,
we keep both, but for environments where users comes from AD, LDAP, Radius, etc.

syncer changed the subtype of this task from "Task" to "Enhancement".Oct 20 2018, 4:49 AM
dmbaturin set Version to 1.2.
dmbaturin edited a custom field.
dmbaturin set Is it a breaking change? to Behavior change.
dmbaturin removed subscribers: VyOS 2.0.x, VyOS 1.2 Crux.
dmbaturin set Issue type to Unspecified (please specify).
dmbaturin removed a project: VyOS 1.4 Sagitta.
dmbaturin edited projects, added Ideas; removed Restricted Project, VyOS 1.5 Circinus.Oct 14 2024, 11:04 AM
dmbaturin changed Is it a breaking change? from Behavior change to Perfectly compatible.
dmbaturin changed Issue type from Unspecified (please specify) to improvement.
syncer raised the priority of this task from Wishlist to Normal.
syncer edited projects, added VyOS Rolling; removed Ideas.
syncer added a subscriber: jestabro.

@jestabro lets talk about this

syncer raised the priority of this task from Normal to High.Oct 28 2024, 5:55 AM
dmbaturin set Issue type to Feature (new functionality).Nov 8 2024, 10:49 AM