n1ngu / ansible-ssh-keys

Ansible role to manage ssh keys in Debian-like systems

ssh-keys

Manage ssh public key authentication (public / private / authorized keys and known hosts) in Debian-like systems.

Requirements

None

Variables

• ssh_keys_private_keys: [default: []]: Private key declarations

• ssh_keys_private_keys.{n}.owner: [required]: The name of the user that should own the file

• ssh_keys_private_keys.{n}.group: [optional, default owner]: The name of the group that should own the file

• ssh_keys_private_keys.{n}.mode: [optional, default 0600]: The UNIX permission mode bits of the file

• ssh_keys_private_keys.{n}.src: [required]: The local path of the key

• ssh_keys_private_keys.{n}.dest: [optional, default: id_rsa]: The remote path of the key (relative to home/.ssh/)

• ssh_keys_private_keys.{n}.state: [optional, default: present]: State

• ssh_keys_public_keys: [default: []]: Public key declarations

• ssh_keys_public_keys.{n}.owner: [required]: The name of the user that should own the file

• ssh_keys_public_keys.{n}.group: [optional, default owner]: The name of the group that should own the file

• ssh_keys_public_keys.{n}.mode: [optional, default 0644]: The UNIX permission mode bits of the file

• ssh_keys_public_keys.{n}.src: [required]: The local path of the key

• ssh_keys_public_keys.{n}.dest: [optional, default: id_rsa.pub]: The remote path of the key (relative to home/.ssh/)

• ssh_keys_public_keys.{n}.state: [optional, default: present]: State

• ssh_keys_authorized_keys: [default: []]: Authorized key declarations

• ssh_keys_authorized_keys.{n}.owner: [required]: The name of the user that should own the file

• ssh_keys_authorized_keys.{n}.src: [required]: The local path of the key

• ssh_keys_authorized_keys.{n}.state: [optional, default: present]: State

• ssh_keys_known_hosts: [default: []]: Known hosts declarations

• ssh_keys_known_hosts.{n}.hostname: [required]: The hostname

• ssh_keys_known_hosts.{n}.enctype: [required]: The type of the fingerprint

• ssh_keys_known_hosts.{n}.fingerprint: [required]: The actual fingerprint

Dependencies

None

Example

---
- hosts: all
  roles:
  - ssh-keys
  vars:
    ssh_keys_private_keys:
      - owner: root
        src: ../../../files/ssh-keys/id_rsa
    ssh_keys_public_keys:
      - owner: root
        src: ../../../files/ssh-keys/id_rsa.pub
    ssh_keys_authorized_keys:
      - owner: root
        src: ../../../files/ssh-keys/id_rsa.pub
    ssh_keys_known_hosts:
      - hostname: github.com
        enctype: ssh-rsa
        fingerprint: 'AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ=='

The fingerprint and enctype can be obtained using ssh-keyscan: ssh-keyscan github.com or the handy ssh-keyscan wrapper included in this role.

License

MIT

Author Information

• Mark van Driel
• Mischa ter Smitten

Feedback, bug-reports, requests, ...

Are welcome!