yadunut/clan-core
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

disable PAM for SSH check

Browse Source
This commit is contained in:
pinpox
2025-05-08 14:21:10 +02:00
committed by Johannes Kirschbauer
parent 70a991f4f2
commit 3c35efa317
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
checks/admin/default.nix
View File

@@ -29,7 +29,7 @@ clanLib.test.makeTestClan {
ssh-test-one = {
module.name = "@clan/admin";
roles.default.machines."server".settings = {
allowedKeys = {testkey = public-key;};
allowedKeys.testkey = public-key;
};
};
};
@@ -38,12 +38,18 @@ clanLib.test.makeTestClan {
nodes = {
client.environment.etc.private-test-key.source = ./private-test-key;
server = {
services.openssh = {
enable = true;
settings.UsePAM = false;
};
};
};
testScript = ''
start_all()
# Show all addresses
machines = [client, server]
for m in machines:
m.systemctl("start network-online.target")
@@ -51,8 +57,7 @@ clanLib.test.makeTestClan {
for m in machines:
m.wait_for_unit("network-online.target")
client.succeed(f"&>2")
client.succeed(f"ssh -F /dev/null -i /etc/private-test-key -o BatchMode=yes root@server true &>/dev/null")
client.succeed(f"ssh -F /dev/null -i /etc/private-test-key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o BatchMode=yes root@server true &>/dev/null")
'';
}
);