3DM2: Etch repository removed

nospam@example.com (Jonas Genannt) — Tue, 30 Aug 2011 14:53:15 +0200

The repository 3DM2/CLI for Etch was removed from http://jonas.genannt.name.

Thanks to IP Exchange GmbH for sponsoring my Debian packages.

SSH public key distribution with puppet

nospam@example.com (Jonas Genannt) — Sat, 21 May 2011 03:51:00 +0200

The last years I have used several tools to distribute the public ssh keys of my users across the servers but they don't fit anymore. I use puppet for my infrastructure but the build in puppet feature ssh_authorized_key does not fit.

I have different users across my servers and same users on many servers (e.g. web farms).

One public ssh key can be an member of:

an ssh public key group that is mapped to an user on an server

an ssh public key group that is mapped to an user on an sever group

an user mapped to an server

an user mapped to an server group

I have created an Webapp with an ajax interface. You can drag & drop the ssh key groups or ssh keys to an user.

The key will be deployed via an puppet parser function, you need the storeconfig feature in puppet.

The webapp has got an own database (postgres) but you can merge the puppet storeconfig database to the server manager database (via an rake task). If you specify an regular expression on your server groups, an new merged server will be automatically added to the group and on the next run of puppet the keys from the server group will be deployed without any action from you.

Puppet stuff:

puppet module

puppet function to fetch the keys from the webapp

fact to fetch existing users on the servers (not needed, but features auto complete in the app)

drag & drop the ssh keys or the ssh key groups from right to left into the users on the servers or server groups

public ssh key distribution with puppet and ajax interface from Jonas on Vimeo.

Postfix as backup MX with Postgrey

nospam@example.com (Jonas Genannt) — Thu, 09 Sep 2010 21:42:34 +0200

For keeping that stuff in my mind:

smtpd_client_restrictions = check_policy_service inet:127.0.0.1:60000
smtpd_recipient_restrictions = permit_mynetworks,permit_mx_backup, reject_unauth_destination
permit_mx_backup_networks = 10.0.0.0/16

Jonas Genannt - debian

3DM2: Etch repository removed

SSH public key distribution with puppet

Postfix as backup MX with Postgrey