I've revamped the scripts and split them differently; it's more generic now, especially if you only care about the union of a set of Launchpad teams or persons.
e.g.: ./lp-members-sshkeys --sshkeys linaro-flexlm linaro-validation to dump SSH keys from folks recursively under ~linaro-flexlm or ~linaro-validation.
Cron to update ~/.ssh/authorized_keys would be: @hourly cd linaro-its-tools && bzr pull >/dev/null 2>&1 && PATH="$PATH:`pwd`" && update-ssh-keys lp-members-sshkeys --sshkeys linaro-flexlm linaro-validation
Cheers,
On Thu, Jul 26, 2012, Loïc Minier wrote:
As Michael noted yesterday, it would be nice to grant access to the lab using some type sync with SSH keys of users from a launchpad group. I'm guessing that code has already been written somewhere else before.
I looked at ssh-import-id, but it didn't have a team feature and didn't particularly impress me, so instead I hacked a custom script for the ~linaro-flexlm use case: http://bazaar.launchpad.net/~linaro-sysadmins/linaro-its-tools/trunk/view/he...
It's custom because it hardcodes ~linaro-flexlm and it also checks that people there are members of ~linaro (harcoded as well). Not hard to make more generic.
It's wrapped by a lock in this script: http://bazaar.launchpad.net/~linaro-sysadmins/linaro-its-tools/trunk/view/he...
and the crontab entry looks like this: @hourly cd linaro-its-tools && bzr pull >/dev/null 2>&1 && ./update-ssh-keys ./flexlm-sshkeys
-- Loïc Minier