novox/mesh-catalog
3
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

ssh-client module: the mesh owns ~/.ssh (to-be 29) — HOLD until to-be 29 deploy #114

Open
jschoubben wants to merge 1 commits from feat/ssh-client-module into main
pull from: feat/ssh-client-module
merge into: :main
Conversation 0 Commits 1 Files Changed 1
+26
jschoubben commented 2026-09-27 15:51:59 +00:00
Owner
Copy Link
Copy Source

Do not merge until the to-be 29 controller is deployed — merging triggers the builder webhook to register ssh-client against the running controller, which won't understand home/${machine:account-home} until deployed. Held so it lands together with the controller change at deploy time.

The module: requires openssh; creates ~/.ssh (0700, owned by ${machine:account}); writes every other node's Host block (HostName + User <account>) into a marked region of ~/.ssh/config (home-scoped, into:block) so ssh <node> reaches each peer as the right account and the operator's own config is kept. Universal-tier; a node with no account gets no config.

**Do not merge until the to-be 29 controller is deployed** — merging triggers the builder webhook to register ssh-client against the running controller, which won't understand `home`/`${machine:account-home}` until deployed. Held so it lands together with the controller change at deploy time. The module: requires openssh; creates `~/.ssh` (0700, owned by `${machine:account}`); writes every other node's Host block (HostName + `User <account>`) into a marked region of `~/.ssh/config` (home-scoped, `into:block`) so `ssh <node>` reaches each peer as the right account and the operator's own config is kept. Universal-tier; a node with no account gets no config.
jschoubben added 1 commit 2026-09-27 15:51:59 +00:00
ssh-client module: the mesh owns ~/.ssh, config from the hub (to-be 29) 048f1b8284 
Requires openssh; creates ~/.ssh (0700, owned by the operator account via
${machine:account}); writes every other node's Host block (HostName + User
<account>) into a marked region of ~/.ssh/config (home-scoped, into:block), so
`ssh <node>` reaches each peer as the right account and the operator's own
config is kept. Universal-tier: assigned wherever a person logs in; a node with
no account gets no config.
You are not authorized to merge this pull request.
This pull request can be merged automatically.
This branch is out-of-date with the base branch
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin feat/ssh-client-module:feat/ssh-client-module
git checkout feat/ssh-client-module
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
jschoubben miel.truyen
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/mesh-catalog#114