首页 > 解决方案 > 厨师创建具有公钥访问权限的用户帐户

问题描述

我正在尝试创建一个在我的食谱文件目录中查找并在目录中为每个公钥创建一个用户的食谱。

cookbooks/users/files/default目录包含:

id_rsa_123456789.pub id_rsa_234567890.pub

基于这两个文件,我想创建 2 个名为的用户帐户123456789234567890并将其公钥分别放在 /home/$USER/.ssh/ 中。

cookbooks/users/attributes/default.rb包含:

default['users']['pub_keys'] = {}

Dir.foreach('../files/default/') do |pub_key|
  if pub_key =~ /\d.pub/
    default['users']['pub_keys'][pub_key] = pub_key.match(/[0-9]{9}/)
  end
end

此代码应创建以下内容:

default['users']['pub_keys'] = {'id_rsa_123456789.pub' => '123456789', 'id_rsa_234567890.pub' => '234567890' }

cookbooks/users/recipes/default.rb包含:

node['users']['pub_keys'].each do |pub_key, sso|
  user sso do
    action :create
    group 'sudoers'
    home "/home/#{sso}"
  end
  directory "/home/#{sso}/.ssh" do
    action :create
  end
  cookbook_file "/home/#{sso}/.ssh/#{pub_key}" do
    source pub_key
    owner sso
    group sso
    mode '0400'
    action :create
  end
end

我认为我的食谱无法读取我的哈希变量,但我不确定为什么或如何修复。

 Relevant File Content:
       ----------------------
       /tmp/kitchen/cache/cookbooks/users/recipes/default.rb:

         1:  #
         2:  # Cookbook:: users
         3:  # Recipe:: default
         4:  #
         5:  
         6:
         7>> node['users']['pub_keys'].each do |pub_key, sso|
         8:    user sso do
         9:      action :create
        10:      group 'sudoers'
        11:      home "/home/#{sso}"
        13:    directory "/home/#{sso}/.ssh" do
        14:      action :create
        15:    end
        16:    cookbook_file "/home/#{sso}/.ssh/#{pub_key}" do

       System Info:
       ------------
       chef_version=14.11.21
       platform=centos
       platform_version=7.6.1810
       ruby=ruby 2.5.3p105 (2018-10-18 revision 65156) [x86_64-linux]
       program_name=/opt/chef/bin/chef-solo
       executable=/opt/chef/bin/chef-solo


       Running handlers:
       [2019-03-11T19:28:18+00:00] ERROR: Running exception handlers
       Running handlers complete
       [2019-03-11T19:28:18+00:00] ERROR: Exception handlers complete
       Chef Client failed. 0 resources updated in 00 seconds
       [2019-03-11T19:28:18+00:00] FATAL: Stacktrace dumped to /tmp/kitchen/cache/chef-stacktrace.out
       [2019-03-11T19:28:18+00:00] FATAL: Please provide the contents of the stacktrace.out file if you file a bug report
       [2019-03-11T19:28:18+00:00] FATAL: NoMethodError: undefined method `[]' for nil:NilClass

标签: rubyhashattributeschef-infra

解决方案


您是否尝试过手动设置属性?无论如何,我认为以“Dir.foreach”开头的 Ruby 代码不起作用并且违反了厨师的最佳实践。


推荐阅读