Skip to content
Neil Fritz edited this page May 30, 2016 · 2 revisions

Hecate's sync sub-command will pull a snapshot of all public keys a user has provisioned to Consul and create an authorized_keys file for that user. If one exists, the current authorized_keys file is backed up to authorized_keys.bak. If the --all flag is specified, the sync will run for all users that have accounts on the current host and also have public keys provisioned in Consul. This command, when not run as root, will only allow synchronization of the authorized_keys file for the user who is running the command. NOTE: The authorized_keys file produced by this command will be overwritten the next time the daemon wakes up.

Help

usage: hecate sync [-h] [--user USER_NAME] [--all]

optional arguments:
  -h, --help            show this help message and exit
  --user USER_NAME, -u USER_NAME
                        The user to get the public key for, defaults to
                        current user
  --all, -a             Perform sync for all users

Options

  • --user - the specific user to synchronize the authorized_keys file for
  • --all - Synchronize the authorized_keys for all users, this requires that the sync command be run as root

Synchronize the authorized_keys File for a Specific User

pinky:bin ncfritz$ ./hecate sync
Backing up authorized keys file
ncfritz:                             ..

Clone this wiki locally