Prefer using ECDSA over RSA as SSH key type
Change-Id: Ic251440186d57f431d4cb8827115c250c2fc07c8
This commit is contained in:
parent
51811b1dbe
commit
e55132ae68
roles
@ -46,25 +46,8 @@
|
||||
owner: vagrant
|
||||
mode: '0600'
|
||||
|
||||
- name: "generate local SSH key '{{ ssh_key_file }}'"
|
||||
openssh_keypair:
|
||||
path: '{{ ssh_key_file }}'
|
||||
type: rsa
|
||||
size: 4096
|
||||
state: present
|
||||
force: no
|
||||
delegate_to: localhost
|
||||
|
||||
- name: "copy '{{ ssh_key_file }}' file to host"
|
||||
copy:
|
||||
src: '{{ ssh_key_file }}{{ item }}'
|
||||
dest: '/home/vagrant/.ssh/id_rsa{{ item }}'
|
||||
owner: vagrant
|
||||
group: vagrant
|
||||
mode: '0600'
|
||||
loop:
|
||||
- ''
|
||||
- '.pub'
|
||||
- include_role:
|
||||
name: tobiko-ensure-ssh-keys
|
||||
|
||||
|
||||
- hosts: all
|
||||
|
@ -7,6 +7,6 @@ Host {{ node.0 }} {{ node.1.hostname }} {{ node.1.ip }}
|
||||
User vagrant
|
||||
StrictHostkeyChecking no
|
||||
UserKnownHostsFile /dev/null
|
||||
IdentityFile ~/.ssh/id_rsa
|
||||
IdentityFile ~/.ssh/id_ecdsa
|
||||
|
||||
{% endfor %}
|
||||
|
@ -3,8 +3,8 @@
|
||||
- name: "generate local SSH key '{{ ssh_key_file }}'"
|
||||
openssh_keypair:
|
||||
path: '{{ ssh_key_file }}'
|
||||
type: rsa
|
||||
size: 4096
|
||||
type: ecdsa
|
||||
size: 521
|
||||
state: present
|
||||
force: no
|
||||
delegate_to: localhost
|
||||
@ -13,7 +13,7 @@
|
||||
- name: "copy '{{ ssh_key_file }}' file to host"
|
||||
copy:
|
||||
src: '{{ ssh_key_file }}{{ item }}'
|
||||
dest: '/home/vagrant/.ssh/id_rsa{{ item }}'
|
||||
dest: '/home/vagrant/.ssh/id_ecdsa{{ item }}'
|
||||
owner: vagrant
|
||||
group: vagrant
|
||||
mode: '0600'
|
||||
|
Loading…
x
Reference in New Issue
Block a user