From d184a0cbd36e36099df27318814fc5235a5d3bab Mon Sep 17 00:00:00 2001 From: Alexandre Pires Date: Tue, 24 Sep 2024 17:44:06 +0200 Subject: [PATCH] Refactor SSH configuration in ansible-apply.yaml and update playbook execution with ECDSA private key --- .github/workflows/ansible-apply.yaml | 12 ++++++------ ssh-keys/ansible/id_ecdsa.key | 1 + ssh-keys/ansible/id_ecdsa.pub | 1 + 3 files changed, 8 insertions(+), 6 deletions(-) create mode 100644 ssh-keys/ansible/id_ecdsa.key create mode 100644 ssh-keys/ansible/id_ecdsa.pub diff --git a/.github/workflows/ansible-apply.yaml b/.github/workflows/ansible-apply.yaml index f160319..0fb008a 100644 --- a/.github/workflows/ansible-apply.yaml +++ b/.github/workflows/ansible-apply.yaml @@ -32,8 +32,8 @@ jobs: sectool ssh unlock ansible mkdir -p ~/.ssh chmod 700 ~/.ssh - cp ssh-keys/ansible/id_rsa ~/.ssh/id_rsa - chmod 600 ~/.ssh/id_rsa + cp ssh-keys/ansible/id_ecdsa ~/.ssh/id_ecdsa + chmod 600 ~/.ssh/id_ecdsa - name: Configure SSH to Disable Host Key Checking env: @@ -51,7 +51,7 @@ jobs: ANSIBLE_USER: ${{ secrets.ANSIBLE_USER }} run: | cd ansible - sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_microk8s.yml --private-key ~/.ssh/id_rsa - sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_gitea.yml --private-key ~/.ssh/id_rsa - sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_nextcloud.yml --private-key ~/.ssh/id_rsa - sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_wordpress.yml --private-key ~/.ssh/id_rsa + sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_microk8s.yml --private-key ~/.ssh/id_ecdsa + sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_gitea.yml --private-key ~/.ssh/id_ecdsa + sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_nextcloud.yml --private-key ~/.ssh/id_ecdsa + sectool exec ansible-playbook -u $ANSIBLE_USER -i inventory/hosts playbook_wordpress.yml --private-key ~/.ssh/id_ecdsa diff --git a/ssh-keys/ansible/id_ecdsa.key b/ssh-keys/ansible/id_ecdsa.key new file mode 100644 index 0000000..de07b68 --- /dev/null +++ b/ssh-keys/ansible/id_ecdsa.key @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/ssh-keys/ansible/id_ecdsa.pub b/ssh-keys/ansible/id_ecdsa.pub new file mode 100644 index 0000000..d113bdd --- /dev/null +++ b/ssh-keys/ansible/id_ecdsa.pub @@ -0,0 +1 @@ +ecdsa-sha2-nistp521 AAAAE2VjZHNhLXNoYTItbmlzdHA1MjEAAAAIbmlzdHA1MjEAAACFBAFBAP7dYOsOGKH1UeyEzWtOv+e46AuJgcN4QiMQdOB9tft2JzR2epd1/e9VDsqN8cGcbIYi6TvsgA+IVtK4bj6wDACt/FHol1L3vV2xK3/dtbu5SEPkkksL8mqB4LXdsepHuapqhVgEanSSysbpRYytcfsy2Rtwi/Wa+8c8+302lTfG3w==