Fai-updater: Difference between revisions

From FAIWiki
Jump to navigation Jump to search
No edit summary
Line 27: Line 27:
A script using ssh is included, but of course you can edit it to match  
A script using ssh is included, but of course you can edit it to match  
your own needs.
your own needs.
To be able to connect to the clients using the provided libexec/faiupdate,  
To be able to connect to the clients using the provided libexec/faiupdate,  
you need to have some way to access them via ssh as root without entering
you need to have some way to access them via ssh as root without entering
a password.
a password.
A solution for this is to install a matching file as  
A solution for this is to install a matching file as  
/root/.ssh/authorized_keys, start ssh-agent and load the private key  
/root/.ssh/authorized_keys, start ssh-agent and load the private key  
into it _before_ starting fai-updater.
into it _before_ starting fai-updater.
Another, but from a security point of view dangerous, possibility is to
Another, but from a security point of view dangerous, possibility is to
use a passphrase-less ssh private key into the account under which you run  
use a passphrase-less ssh private key into the account under which you run  

Revision as of 18:29, 21 March 2006

fai-updater - run and supervise softupdates on many machines at the same time

License

I put this code under the GPLv2

Required packages

for the frontend, you need the Curses::UI perl module, in Debian you get it via

apt-get install libcurses-ui-perl

On the client side, fai-client is needed and of course a FAI configuration which is update-safe.

Install

Just unpack the tarball.

Command line options

 updater-curses [options] <netgroup|-H host1,host2,...>
 --help            display this help message
 --version         print version
 -o                ordered mode: don't randomize order of hosts
 -s <number>       number of updates running simultanously
 -n                dryrun mode: use a dummy-script instead of really 
                   contacting the clients

Connecting to the clients

A script using ssh is included, but of course you can edit it to match your own needs.

To be able to connect to the clients using the provided libexec/faiupdate, you need to have some way to access them via ssh as root without entering a password.

A solution for this is to install a matching file as /root/.ssh/authorized_keys, start ssh-agent and load the private key into it _before_ starting fai-updater.

Another, but from a security point of view dangerous, possibility is to use a passphrase-less ssh private key into the account under which you run fai-updater.

Some comments on the code

I know the code is quite rough, as though I tried programming cleanly, a lot of hacks have slipped in, and I don't have the time to clean up the code right now due to my diploma thesis' deadline ;)

If you have any questions or suggestions, feel free to write me.

Henning Glawe <glaweh@debian.org>