mirror of
https://we.phorge.it/source/phorge.git
synced 2024-11-14 10:52:41 +01:00
c84b9d408c
Summary: Ref T2783. This is basically a more refined version of D10400, which churned a bit on things like SSH key storage, the actual way the signing protocol shook out, etc. - When Phabricator tries to make an intra-cluster service call as the omnipotent user, sign it with the host's device key. - Add `bin/almanac register` to say "this host is X device, identified by private key Y". This stores the keypair locally, adds the public key to Almanac, and trusts it. Net effect is that once a host has been registered, the daemons can make calls to other nodes as the omnipotent user. This is primarily necessary so they can access repository API methods on remote hosts. Test Plan: - Ran `bin/almanac register` with various valid and invalid inputs. - Verified keys get generated/added/stored properly. - Made a device-signed cluster Conduit call. - Made a normal old user-signed cluster Conduit call. Reviewers: btrahan Reviewed By: btrahan Subscribers: epriestley Maniphest Tasks: T2783 Differential Revision: https://secure.phabricator.com/D11158
32 lines
633 B
Text
32 lines
633 B
Text
# NOTE: Thinking about adding files created by your operating system, IDE,
|
|
# or text editor here? Don't! Add them to your per-user .gitignore instead.
|
|
|
|
# Diviner
|
|
/docs/
|
|
/.divinercache/
|
|
|
|
# libphutil
|
|
/src/.phutil_module_cache
|
|
|
|
# Configuration
|
|
/conf/custom/*
|
|
/conf/local/local.json
|
|
/conf/local/ENVIRONMENT
|
|
/conf/local/VERSION
|
|
/conf/keys/device.pub
|
|
/conf/keys/device.key
|
|
|
|
# Impact Font
|
|
/resources/font/impact.ttf
|
|
|
|
# User-accessible hook for adhoc debugging scripts
|
|
/support/debug.php
|
|
|
|
# User-accessible hook for adhoc startup code
|
|
/support/preamble.php
|
|
|
|
# Users can link binaries here
|
|
/support/bin/*
|
|
|
|
# User extensions
|
|
/src/extensions/*
|