cooperlees / tgsign

Sign SSH Keys for Terragraph Access

tgsign

Sign SSH Keys for Terragraph Access

What is tgsign

Small Python tool that can resign SSH Key pair for Terragraph access.

How to use tgsign

• Optional / Reccomended - Make a venv
  • python3 -m venv /some/path
• pip install tgsign
  • /some/path/bin/pip install git+git://github.com/cooperlees/tgsign
• Initalize tgsign (store API token + ID and point at your SSH Keys)
  • /some/path/bin/tgsign --init
• Then every ~30 days obtain a new certificate
  • /some/path/bin/tgsign

Now enjoy access to a Terragraph Development image.

Sample .tgsign.conf

[tgsign]
api_id = foo
api_token = bar
public_key_file = /home/cooper/.ssh/id_25519.pub
username = cooper

tgsign's Issues

Add CI Run

Write an integration test to hit sw.terragraph.link to test /sign works as we'd hoped.

Ensure Windows support is correct

• Check we're putting the config in a friendly location - Prob want to use appdirs (https://pypi.org/project/appdirs/)
• Decipher the st_mode to see that we're setting perms to keep SSH happy