diff options
| author | Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org> | 2020-08-09 10:25:27 +0200 |
|---|---|---|
| committer | Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org> | 2020-08-09 10:25:42 +0200 |
| commit | 5057dfb01eab12576842b4793db234fcc2dd20c2 (patch) | |
| tree | 365da53b80b51389116f974f8ac976be9b6c79db | |
| parent | 4db565f035a53cc168672ca69689ae0b73c53f81 (diff) | |
Andreas Grapentin: Add back gpg key to refresh it in parabola-keyring
The following commit broke login on the Parabola servers:
8f03372 Andreas Grapentin: Remove gpg key to refresh it in parabola-keyring
8f0337256560c4a16a2d271b7118aee854fedd31
Apparently removing gpg keys and the shell entry break login in the
Parabola servers that depend on the data in hackers to setup that
login process.
At first I got some help on IRC to guide me on how to do it, then as I got
some errors from the remote lint script, I tried to find a working
combination that wasn't triggered by it through trial and error.
Running the lint script locally with that patch also finds no error.
Once the login were broken, bill-auger tried to fix it by removing the SSH
keys:
6f4f6b2 fix users/1038.yml
6f4f6b2331a9b697355ee568b246ab9eb9d4262a
and re-adding a shell:
43a438f fix users/1038.yml
43a438fee15e23e95146ed317e5078876e760e05
Once that was done bill-auger tried to rebuild the keyring but that failed
because the login service was not running. But then the service could be
started.
Then bill-auger pushed an empty commit and the keyring build did succeed.
As this is now all fixed, we now know:
- How to break login with malformed yaml that doesn't trigger any warnings
nor errors. We will need to fix that.
- How to repair that once it happens. You probably need a root shell on the
affected machine to fix that though.
- How to effectively disable a user gpg key without breaking the login
service.
So we can now revert to the state before the "8f03372 Andreas Grapentin:
Remove gpg key to refresh it in parabola-keyring" commit to effectively
refresh Andreas Grapentin's gpg key.
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
| -rw-r--r-- | users/1038.yml | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/users/1038.yml b/users/1038.yml index 9b7e57e..b7ce97f 100644 --- a/users/1038.yml +++ b/users/1038.yml @@ -4,7 +4,11 @@ fullname: Andreas Grapentin email: - andreas@grapentin.org groups: -- fellows +- hackers +pgp_keyid: BFA8008A8265677063B11BF47171986E4B745536 +ssh_keys: + andreas@grapentin.org: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuXyvHi+T65YJ8bM3RQGNsxLlHHM5IG/T53MPznXBAaUqvexLzKiXEvh52uR1Kd6jQ3khNbb3CF2QpGwH/uK+YBoKHwur9PPoEp7ZeEH7nTmWKbOKLSxRp9QgtcBANby8K9Jo3wMHbU8AFN8W7BrlT4/oAPs82jpPnfyuBmDAkW4jl0IEy5X6sdaSlGifLgo+d4rzrpyNXPQYSmEQOp3pHwaN/e7AB9NjHtoLn30d7oMUgbLNdUgdk+LptR8fvhxHeJLNRxYCwDPQgpkokNYmlEx+eCHgJaGVcEPeXqRp9xjtMa/WfWrgDtRDdTQh8Lsm+eNNLDXukR0JPj7lAMl0x + oaken-source@parabola.nu: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpe8BfUvFILmqsnxKSmc7wA4nvpxrPjuZ88ar+lVZySrJrtfgsgW4oorOcxp/yRJyglsAgjnxqoafTZ3Or6jIUV33KzT6BLz/U5WlBSGkqRLHNZIdp3RMbRFBJZzDa1ABykl1Is90UbiM9GC2GEyvHvJnmfHJkc0Rx6PzO4LeW7xw6rFt14I/CjUOI6RF3qkZWN8i+ez07P6QC0gdXBnRgMpUAeA/A6VUzg3OZBxq5SRq311EwqPhHRzng97K+pEV3dkl7G8xQN+tvCjQvel9Me2YkHx3rbiHGSyuGaZeNxrZlaghWNdLEajXE/6/tRf0Y/AQ030c3MranpEBiP0SR shell: "/bin/bash" extra: other_contact: oaken-source on freenode |