proyectos/move-data-nas
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: deploy all machine keys (mesh)

Browse Source 
When deploying keys to a machine, upload ALL private keys from ALL
other machines (not just sync pair peers). Also populate known_hosts
with all other machine hosts. Creates a full mesh where any machine
can SSH to any other.

- sshmanager/deploy.go: change knownHostsHost string parameter to
  knownHostsHosts []string for multi-host ssh-keyscan
- handlers_machines.go: replace sync-pair-based key detection with
  loop over all machines, deduplicating by local key path
This commit is contained in:
Daniel Arroyo
2026-07-09 20:52:33 -04:00
parent e0252829b3
commit f7801585a6
2 changed files with 35 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/api/handlers_machines.go
+22 -33
View File
@@ -4,6 +4,7 @@ import (
"context"
"database/sql"
"encoding/json"
"fmt"
"log/slog"
"net/http"
"os"
@@ -367,45 +368,33 @@ func (h *MachineHandler) DeployKeys(w http.ResponseWriter, r *http.Request) {
}
}
pairRepo := models.NewSyncPairRepository(h.db)
allPairs, err := pairRepo.GetAll()
allMachines, err := repo.GetAll()
if err != nil {
slog.Warn("failed to fetch sync pairs for auto-detect", "error", err)
slog.Warn("failed to fetch machines for auto-detect", "error", err)
}
var keys []sshmanager.DeployKey
seenKeys := make(map[string]bool)
knownHostsHosts := []string{}
for _, pair := range allPairs {
if pair.SourceMachineID != nil && *pair.SourceMachineID == m.ID {
if pair.DestMachineID != nil {
destMachine, err := repo.GetByID(*pair.DestMachineID)
if err == nil && destMachine.SSHKeyID != nil {
skRepo := models.NewSSHKeyRepository(h.db)
sk, err := skRepo.GetByID(*destMachine.SSHKeyID)
if err == nil && sk.PrivateKeyPath != "" {
keys = append(keys, sshmanager.DeployKey{
LocalPath: sk.PrivateKeyPath,
RemotePath: "/var/lib/syncserver/ssh/keys/" + filepath.Base(sk.PrivateKeyPath),
Mode: 0600,
})
}
}
}
for _, other := range allMachines {
if other.ID == m.ID {
continue
}
if pair.DestMachineID != nil && *pair.DestMachineID == m.ID {
if pair.SourceMachineID != nil {
srcMachine, err := repo.GetByID(*pair.SourceMachineID)
if err == nil && srcMachine.SSHKeyID != nil {
skRepo := models.NewSSHKeyRepository(h.db)
sk, err := skRepo.GetByID(*srcMachine.SSHKeyID)
if err == nil && sk.PrivateKeyPath != "" {
keys = append(keys, sshmanager.DeployKey{
LocalPath: sk.PrivateKeyPath,
RemotePath: "/var/lib/syncserver/ssh/keys/" + filepath.Base(sk.PrivateKeyPath),
Mode: 0600,
})
}
knownHostsHosts = append(knownHostsHosts, fmt.Sprintf("%s:%d", other.Host, other.Port))
if other.SSHKeyID != nil {
skRepo := models.NewSSHKeyRepository(h.db)
sk, err := skRepo.GetByID(*other.SSHKeyID)
if err == nil && sk.PrivateKeyPath != "" {
if seenKeys[sk.PrivateKeyPath] {
continue
}
seenKeys[sk.PrivateKeyPath] = true
keys = append(keys, sshmanager.DeployKey{
LocalPath: sk.PrivateKeyPath,
RemotePath: "/var/lib/syncserver/ssh/keys/" + filepath.Base(sk.PrivateKeyPath),
Mode: 0600,
})
}
}
}
@@ -422,7 +411,7 @@ func (h *MachineHandler) DeployKeys(w http.ResponseWriter, r *http.Request) {
m.Port,
m.SSHUser,
keys,
req.KnownHostsHost,
knownHostsHosts,
req.IncludeServerKey,
)
if err != nil {