KNEL/PFVCluster
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(access): ultix-field uses ultixfield, stlpc-garage done, -t fix for su

Browse Source 
access-matrix.sh:
- ultix-field mapped to ultixfield (was falling through to localuser)

bootstrap-all.sh:
- Removed stlpc-garage (now accessible)
- ultix-field moved to ultixfield user
- Added ssh -t for proper su terminal allocation
- 14 systems remaining

Refs [#403]

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
This commit is contained in:
mrcharles
2026-08-10 14:35:11 -05:00
parent 77e88c98a1
commit ba6f30492c
2 changed files with 13 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
access-matrix.sh
+1
View File
@@ -22,6 +22,7 @@ users_for() {
tsys-ucs-*) echo "root:no" ;; tsys-ucs-*) echo "root:no" ;;
ultix-streaming) echo "root:no" ;; ultix-streaming) echo "root:no" ;;
stlpc-*) echo "root:labuser:no" ;; stlpc-*) echo "root:labuser:no" ;;
ultix-field) echo "ultixfield:yes" ;;
subopi*) echo "subodev:yes" ;; subopi*) echo "subodev:yes" ;;
*) echo "localuser:yes" ;; *) echo "localuser:yes" ;;
esac esac
bootstrap-all.sh
+12 -13
View File
@@ -2,8 +2,8 @@
# bootstrap-all.sh — push agent key + sudo to every remaining NO-KEY system. # bootstrap-all.sh — push agent key + sudo to every remaining NO-KEY system.
# #
# Groups (user determined by system type): # Groups (user determined by system type):
# 1. labuser+root → stlpc-* systems (key to both, no sudo for labuser) # 1. subodev → subopi* systems
# 2. subodev → subopi* systems # 2. ultixfield → ultix-field
# 3. localuser → everything else (cloudron, siem, ubuntu server, kali, etc.) # 3. localuser → everything else (cloudron, siem, ubuntu server, kali, etc.)
# #
# You'll enter passwords interactively. Idempotent: safe to re-run. # You'll enter passwords interactively. Idempotent: safe to re-run.
@@ -21,7 +21,7 @@ run_as_user() {
echo " $name ($ip) — $user" echo " $name ($ip) — $user"
echo "========================================" echo "========================================"
if scp "${SSH_OPTS[@]}" "$SCRIPT" "${user}@${ip}:/tmp/" 2>/dev/null; then if scp "${SSH_OPTS[@]}" "$SCRIPT" "${user}@${ip}:/tmp/" 2>/dev/null; then
if ssh "${SSH_OPTS[@]}" "${user}@${ip}" 'su -c "bash /tmp/'"$SCRIPT"'"'; then if ssh -t "${SSH_OPTS[@]}" "${user}@${ip}" 'su -c "bash /tmp/'"$SCRIPT"'"'; then
echo " -> $name DONE"; ok=$((ok+1)) echo " -> $name DONE"; ok=$((ok+1))
else else
echo " -> $name FAILED (su to root)"; fail=$((fail+1)); faillist="$faillist $name" echo " -> $name FAILED (su to root)"; fail=$((fail+1)); faillist="$faillist $name"
@@ -32,22 +32,22 @@ run_as_user() {
echo echo
} }
# === Group 1: labuser (stlpc-* — agent-bootstrap pushes keys to root+labuser) === # === Group 1: subodev (subopi*) ===
echo "########################################" echo "########################################"
echo "# Group 1: labuser (stlpc-*)" echo "# Group 1: subodev (subopi*)"
echo "########################################"
echo
run_as_user stlpc-garage 100.72.192.22 labuser
# === Group 2: subodev (subopi*) ===
echo "########################################"
echo "# Group 2: subodev (subopi*)"
echo "########################################" echo "########################################"
echo echo
run_as_user subopi3 100.93.17.77 subodev run_as_user subopi3 100.93.17.77 subodev
run_as_user subopi-dev-3 100.64.231.65 subodev run_as_user subopi-dev-3 100.64.231.65 subodev
run_as_user subopi-dev-4 100.65.224.85 subodev run_as_user subopi-dev-4 100.65.224.85 subodev
# === Group 2: ultixfield ===
echo "########################################"
echo "# Group 2: ultixfield"
echo "########################################"
echo
run_as_user ultix-field 100.115.233.124 ultixfield
# === Group 3: localuser (everything else) === # === Group 3: localuser (everything else) ===
echo "########################################" echo "########################################"
echo "# Group 3: localuser (standard systems)" echo "# Group 3: localuser (standard systems)"
@@ -63,7 +63,6 @@ run_as_user preprod-siem 100.98.162.14 localuser
run_as_user sectestbed-cloudron 100.97.140.105 localuser run_as_user sectestbed-cloudron 100.97.140.105 localuser
run_as_user sectestbed-siem 100.108.121.18 localuser run_as_user sectestbed-siem 100.108.121.18 localuser
run_as_user tsys-siem 100.72.35.113 localuser run_as_user tsys-siem 100.72.35.113 localuser
run_as_user ultix-field 100.115.233.124 localuser
echo "========================================" echo "========================================"
echo "Summary: $ok done, $fail failed" echo "Summary: $ok done, $fail failed"