[X2Go-Dev] Raspberry Pi Builds and How to Handle Authentication/Signing
ionic at ionic.de
Sat Apr 4 21:52:07 CEST 2015
On 04.04.2015 05:45 PM, Michael DePaulo wrote:
> I figured I would setup my Raspberry Pi 2 at my apartment as a Jenkins
> slave. However, it appears that I would need to upload the packages to
> code.x2go.org with dupload, which would in turn call scp in batch
> mode. That means setting up SSH public key authentication.
> We would also have to figure out package signing.
> So before I continue, I want to know:
> 1. Should I continue setting this up, or should we try to use
> qemubuilder on japsand with a Raspberry Pi version of QEMU?
Really not sure what makes more sense. Qemu is really slow for
non-native arches (naturally, due to the emulation.) A raspberry pi
might even be faster than that, but I don't know this for sure.
> 2. If I continue setting this up, how should we setup the SSH and GPG
I believe GPG signing should be done on the server after uploading the
files. Transferring the general private key to your RasPi machine isn't
a good idea.
I'm also wary to having your RasPi machine log in to ymir as x2go-admin,
for that would it basically give it complete access to everything,
including git repos.
Uploading files into a staging area to which x2go-admin has access with
a new, unprivileged user and having a cron job for x2go-admin move the
files in place seems to be a saner solution.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 884 bytes
Desc: OpenPGP digital signature
More information about the x2go-dev