[PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-10 Thread Michal Privoznik
Marc-André posted a patch that implements agent handling. I've written the rest. Marc-André Lureau (1): qemu_agent: add qemuAgentSSH{Add,Remove,Get}AuthorizedKeys Michal Prívozník (5): Introduce OpenSSH authorized key file mgmt APIs remote: Implement OpenSSH authorized key file mgmt APIs

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-11 Thread Peter Krempa
On Tue, Nov 10, 2020 at 16:11:40 +0100, Michal Privoznik wrote: > Marc-André posted a patch that implements agent handling. I've written > the rest. > > Marc-André Lureau (1): > qemu_agent: add qemuAgentSSH{Add,Remove,Get}AuthorizedKeys > > Michal Prívozník (5): > Introduce OpenSSH author

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-11 Thread Michal Privoznik
On 11/11/20 11:32 AM, Peter Krempa wrote: On Tue, Nov 10, 2020 at 16:11:40 +0100, Michal Privoznik wrote: Marc-André posted a patch that implements agent handling. I've written the rest. Marc-André Lureau (1): qemu_agent: add qemuAgentSSH{Add,Remove,Get}AuthorizedKeys Michal Prívozník (5):

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-11 Thread Peter Krempa
On Wed, Nov 11, 2020 at 13:04:19 +0100, Michal Privoznik wrote: > On 11/11/20 11:32 AM, Peter Krempa wrote: > > On Tue, Nov 10, 2020 at 16:11:40 +0100, Michal Privoznik wrote: > > > Marc-André posted a patch that implements agent handling. I've written > > > the rest. > > > > > > Marc-André Lure

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-12 Thread Michal Privoznik
On 11/11/20 1:04 PM, Michal Privoznik wrote: On 11/11/20 11:32 AM, Peter Krempa wrote: On Tue, Nov 10, 2020 at 16:11:40 +0100, Michal Privoznik wrote: Marc-André posted a patch that implements agent handling. I've written the rest. Marc-André Lureau (1):    qemu_agent: add qemuAgentSSH{Add,Rem

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-12 Thread Vasiliy Tolstov
Useful things. As i understand it qemu-ga eventually can replace cloud-init stuff. As for now it already have high level api and low level api (like read/write files) вт, 10 нояб. 2020 г. в 18:49, Michal Privoznik : > > Marc-André posted a patch that implements agent handling. I've written > the r

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-12 Thread Michal Privoznik
On 11/12/20 1:16 PM, Vasiliy Tolstov wrote: Useful things. As i understand it qemu-ga eventually can replace cloud-init stuff. As for now it already have high level api and low level api (like read/write files) Yeah, the low level file manipulation APIs are terrible because they have to rely o

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-12 Thread Peter Krempa
On Thu, Nov 12, 2020 at 12:55:23 +0100, Michal Privoznik wrote: > On 11/11/20 1:04 PM, Michal Privoznik wrote: > > On 11/11/20 11:32 AM, Peter Krempa wrote: > > > On Tue, Nov 10, 2020 at 16:11:40 +0100, Michal Privoznik wrote: > > > > Marc-André posted a patch that implements agent handling. I've

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-12 Thread Michal Privoznik
On 11/12/20 3:46 PM, Peter Krempa wrote: Saying that virDomainQemuAgentCommand is fully supported to be used would free us from having to add arbitrary unextendable APIs for every single guest agent API, but would still allow libvirt to use APIs we need. By saying that mgmt apps will need to l

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-12 Thread Daniel P . Berrangé
On Thu, Nov 12, 2020 at 05:18:06PM +0100, Michal Privoznik wrote: > On 11/12/20 3:46 PM, Peter Krempa wrote: > > > Saying that virDomainQemuAgentCommand is fully supported to be used > > would free us from having to add arbitrary unextendable APIs for every > > single guest agent API, but would st

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-12 Thread Peter Krempa
On Thu, Nov 12, 2020 at 16:27:02 +, Daniel Berrange wrote: > On Thu, Nov 12, 2020 at 05:18:06PM +0100, Michal Privoznik wrote: > > On 11/12/20 3:46 PM, Peter Krempa wrote: > > > > > Saying that virDomainQemuAgentCommand is fully supported to be used > > > would free us from having to add arbit

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-13 Thread Vasiliy Tolstov
But how about selinux? I'm run qemu-ga in guest and want to modify the authorized_keys file of some user? Do we need to extend the selinux policy to allow modification of such files in all guests? чт, 12 нояб. 2020 г. в 19:41, Peter Krempa : > > On Thu, Nov 12, 2020 at 16:27:02 +, Daniel Berra

Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

2020-11-13 Thread Michal Privoznik
On 11/13/20 9:23 AM, Vasiliy Tolstov wrote: But how about selinux? I'm run qemu-ga in guest and want to modify the authorized_keys file of some user? Do we need to extend the selinux policy to allow modification of such files in all guests? Yes we do. But since qemu-ga offers this under API it