Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

hiba: Add initial recipe for hiba #597

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Commits on Oct 3, 2023

  1. hiba: Add initial recipe for hiba

    Discussion to install the HIBA Internal OpenSSH to fetch dependencies
    can be found in
    https://lists.openembedded.org/g/openembedded-core/topic/94475279#172977
    
    HIBA is a system built on top of regular OpenSSH certificate-based
    authentication that allows to manage flexible authorization of
    principals on pools of target hosts without the need to push customized
    authorized_users files periodically.
    
    This recipe allow us to manage SSH to production machines easily and not
    rely on authorized keys.
    
    Tested:
    This copy of the recipe was used and tested internally to be working
    properly.
    
    Ran the local-setup.sh and works fine on a BMC.
    ```
    $ ssh -F /tmp/tmp.w8itTW/ssh_config -p 2201 root@localhost
     #####################################################
     #                 setup-local.sh                    #
     # Host Identity Based Authorization SSHD example.   #
     #####################################################
    prodHost: limited access
    Connection to localhost closed.
    $ ssh -F /tmp/tmp.w8itTW/ssh_config -p 2202 root@localhost
     #####################################################
     #                 setup-local.sh                    #
     # Host Identity Based Authorization SSHD example.   #
     #####################################################
    Last login: Thu Jan  1 00:47:28 1970 from ::1
    ```
    
    Signed-off-by: Willy Tu <wltu@google.com>
    wltu committed Oct 3, 2023
    Configuration menu
    Copy the full SHA
    22ef850 View commit details
    Browse the repository at this point in the history