Statistics
| Branch: | Tag: | Revision:

root / tools / setup-ssh @ 577d45d4

History | View | Annotate | Download (14.3 kB)

# Date Author Comment
c4da9eaf 10/29/2010 04:27 pm René Nussbaumer

setup-ssh: Better error reporting

Together with Michael we refactored the code to make it better and
easier error reporting. Without printing backtraces for authentication
and verification issues.

Signed-off-by: René Nussbaumer <>
Reviewed-by: Michael Hanselmann <>

e389d95b 10/21/2010 05:03 pm René Nussbaumer

Adjust the error message of setup-ssh if join check fails

Signed-off-by: René Nussbaumer <>
Reviewed-by: Michael Hanselmann <>
Reviewed-by: Iustin Pop <>

a68fe106 09/10/2010 03:11 pm Michael Hanselmann

Merge branch 'devel-2.2'

  • devel-2.2:
    Fix pylint warning in http/__init__.py
    Allow SSL ciphers to be overridden in HTTP server
    jqueue: Resume jobs from “waitlock” status
    jqueue: Move queue inspection into separate function
    jqueue: Don't update file in MarkUnfinishedOps...
a6d350cc 09/10/2010 03:10 pm Michael Hanselmann

Merge branch 'stable-2.2' into devel-2.2

  • stable-2.2:
    Fix pylint warning in http/__init__.py
    Allow SSL ciphers to be overridden in HTTP server
    If we had any errors in setup in one of the hosts, exit with non-zero

Signed-off-by: Michael Hanselmann <>...

d3b18b8e 09/09/2010 04:52 pm René Nussbaumer

Adding functionality to check feasability of joining the host

This checks if the host might possibily belong already to another
cluster. If this is the case we abort without any further action
unless we are forced by --force-join.

Signed-off-by: René Nussbaumer <>...

5b27346a 09/09/2010 03:43 pm René Nussbaumer

If we had any errors in setup in one of the hosts, exit with non-zero

Signed-off-by: René Nussbaumer <>
Reviewed-by: Michael Hanselmann <>

f9b87434 09/09/2010 02:32 pm René Nussbaumer

Fix the output of the key fingerprint from binary to hex

Signed-off-by: René Nussbaumer <>
Reviewed-by: Iustin Pop <>

ae8419a2 09/07/2010 01:07 pm Michael Hanselmann

Merge branch 'devel-2.2'

  • devel-2.2:
    cli: Use list of options shared between commands
    jqueue: Use separate function for encoding errors
    Fix some epydoc warnings
    Fix breakage introduced by commit 8044bf655
    Remove “dry_run” from opcodes.OpCreateInstance...
697a3d61 09/03/2010 02:27 pm Manuel Franceschini

Fix some epydoc warnings

Signed-off-by: Manuel Franceschini <>
Reviewed-by: Michael Hanselmann <>

3ef51126 08/25/2010 02:07 pm René Nussbaumer

Revert behaviour for calling SetupNodeDaemon

This was previously done in setup-ssh which was the wrong place

Signed-off-by: René Nussbaumer <>
Reviewed-by: Guido Trotter <>

310a8944 08/25/2010 12:02 pm René Nussbaumer

Adding host key verification to setup-ssh

Signed-off-by: René Nussbaumer <>
Reviewed-by: Michael Hanselmann <>
Reviewed-by: Iustin Pop <>

634a9a35 08/23/2010 12:50 pm Iustin Pop

setup-ssh: fix updating of authorized_keys

Due to what seems like a bug (or inconsistency) in paramiko, files
opened with a+ over SFTP need a seek() in order for the user to be able
to read data from them. We implement this, and rely on the fact that we
do iterate over all lines before writing and that the file is opened in...

3dc66ebc 08/23/2010 12:47 pm Iustin Pop

setup-ssh: Also use keys from the ssh-agent

Currently, setup-ssh only uses one disk-based key. This means that any
setup where we use keys from ssh-agent (which do not necessarily exist
on disk) will break when moving from the old method to setup-ssh.

This patch moves the SSH key handling to separate functions, and uses...

8647a52c 08/20/2010 05:41 pm Iustin Pop

setup-ssh: fix the logging error message

This took a bit of interesting debugging, but the issue seems to be that
on older python/logging/paramiko (I'm not sure which is at fault here),
the other threads are finishing later than the main thread, so the
logging module closes the logging file (but doesn't unregister it)...

7bff16bd 08/20/2010 05:41 pm Iustin Pop

setup-ssh: only read the ssh port once

Then reuse it. With certain setups, this could be slow when pre-seeding
an entire cluster.

Signed-off-by: Iustin Pop <>
Reviewed-by: Guido Trotter <>
Reviewed-by: René Nussbaumer <>

5c654e95 08/20/2010 05:41 pm Iustin Pop

setup-ssh: redo the logging levels

There is not enough logged by default on stderr, and way too much
information in the log file.

Since we don't want to debug paramiko itself, we filter only warnings
and above.

Otherwise, we make WARNINGS the default level, with verbose meaning INFO...

7a6a27af 08/20/2010 05:41 pm Iustin Pop

setup-ssh: try to use key auth first

This patch changes the setup-ssh workflow to try key authentication
first, and then fall-back to password authentication. The password is
also read lazily, with no prompts if we can authenticate via keys.

Signed-off-by: Iustin Pop <>...

c9a4a662 07/21/2010 04:51 pm Manuel Franceschini

Disable 'invalid name' pylint warning for tools/setup-ssh

Signed-off-by: Manuel Franceschini <>
Reviewed-by: René Nussbaumer <>

05cd934d 07/20/2010 12:34 pm René Nussbaumer

Adding tool to setup SSH on a remote host

This prepares the remote node to be joined into a cluster

Signed-off-by: René Nussbaumer <>
Reviewed-by: Michael Hanselmann <>