Run into a brain puzzler, hoping you guys can help me find a good
solution.
I have a rather long list of ssh config file entries for a variety of
different customer servers. Right now I keep my own .ssh/config checked
into a git repo so I can easily synchronize it across systems, which
works really really well for one maybe two people. I'm trying to figure
out how best to be able to share out with employees the customer
entries, but not share my other personal system entries. Right now when
I make updates I'm hand-editing out a separate file for employees that
they then copy into their personal config, but that's going to get
rapidly unwieldy. Ideally I'd love an Include directive in .ssh/config
so we can all just checkout a '.ssh/company_config' that lives alongside
each users personal .ssh/config, or even have them separated by
customer. Only it looks like someone submitted an almost-working patch
for this in 2009 to a different few places that never got worked on or
integrated, and I've seen feature requests going back 5+ years with no
progress on that front. So I'm not holding my breath.
In lieu of being able to do ssh includes, a few people with the same
idea seem to be doing things with ssh proxies that contain the more
advanced configs, or running scripts in their bash profile that cat a
bunch of disparate files together into one .ssh/config. We could make
the company-wide config a part of the global ssh conf for every system
we use it on, until we get to stuff like my jumphost at home that I
share with my family and need that data to be account/profile specific.
There are some enterprise tools that I believe could help manage all
this, and things I could probably do with pam/domain policy/config
management servers, I'm just finding us sitting right in a gap between
'that's probably overkill right now from a time and money perspective,
but in the meantime we also have too much manage by hand much longer'.
Anyone run into this before and figured out a graceful,
easily-maintainable way of doing this on a small/medium scale? I'm not
looking to invest a huge amount of time in building out custom tools,
but anything that has a reasonably low barrier to entry/deploy is good.
The issue isn't so much getting the raw data out to user systems, git
handles that just fine as would a number of other options, it's managing
how ssh knows where to find and use said data when it comes from
different sources that I'm beating my head on.
Tanks!
--
Jill
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)