Fai-updater: Difference between revisions
No edit summary |
|||
| Line 27: | Line 27: | ||
A script using ssh is included, but of course you can edit it to match | A script using ssh is included, but of course you can edit it to match | ||
your own needs. | your own needs. | ||
To be able to connect to the clients using the provided libexec/faiupdate, | To be able to connect to the clients using the provided libexec/faiupdate, | ||
you need to have some way to access them via ssh as root without entering | you need to have some way to access them via ssh as root without entering | ||
a password. | a password. | ||
A solution for this is to install a matching file as | A solution for this is to install a matching file as | ||
/root/.ssh/authorized_keys, start ssh-agent and load the private key | /root/.ssh/authorized_keys, start ssh-agent and load the private key | ||
into it _before_ starting fai-updater. | into it _before_ starting fai-updater. | ||
Another, but from a security point of view dangerous, possibility is to | Another, but from a security point of view dangerous, possibility is to | ||
use a passphrase-less ssh private key into the account under which you run | use a passphrase-less ssh private key into the account under which you run | ||
Revision as of 18:29, 21 March 2006
fai-updater - run and supervise softupdates on many machines at the same time
License
I put this code under the GPLv2
Required packages
for the frontend, you need the Curses::UI perl module, in Debian you get it via
apt-get install libcurses-ui-perl
On the client side, fai-client is needed and of course a FAI configuration which is update-safe.
Install
Just unpack the tarball.
Command line options
updater-curses [options] <netgroup|-H host1,host2,...>
--help display this help message
--version print version
-o ordered mode: don't randomize order of hosts
-s <number> number of updates running simultanously
-n dryrun mode: use a dummy-script instead of really
contacting the clients
Connecting to the clients
A script using ssh is included, but of course you can edit it to match your own needs.
To be able to connect to the clients using the provided libexec/faiupdate, you need to have some way to access them via ssh as root without entering a password.
A solution for this is to install a matching file as /root/.ssh/authorized_keys, start ssh-agent and load the private key into it _before_ starting fai-updater.
Another, but from a security point of view dangerous, possibility is to use a passphrase-less ssh private key into the account under which you run fai-updater.
Some comments on the code
I know the code is quite rough, as though I tried programming cleanly, a lot of hacks have slipped in, and I don't have the time to clean up the code right now due to my diploma thesis' deadline ;)
If you have any questions or suggestions, feel free to write me.
Henning Glawe <glaweh@debian.org>