[Box-Admins] Private keys

[Frank Shearar]

On 9 January 2013 13:16, Chris Cunnington <smalltalktelevision at gmail.com> wrote:
> On 2013-01-09 5:09 AM, Frank Shearar wrote:
>>
>> Hi,
>>
>> I need to somehow get private keys for the angband and norst nodes
>> securely onto squeakci.org. My preference is to use scp, but that
>> requires shell access. I don't think that, in general, we want shell
>> access for teamjenkins. Ideas on how to proceed?
>>
>> (I want to set up the two nodes to have Jenkins ssh to them, because
>> that might be easier than hacking on slaves authenticating to the
>> server.)
>>
>> frank
>
> Well, I guess you need to send the keys to a person with shell access. Ken
> is likely the best person for that, as he manages keys all the time.
>
> Chris

Yes, but that just changes the problem to "how can I pass the keys to
Ken in a secure manner?"

Apparently giving a user the shell "rssh" lets a user do things like
move files, rsync and such, but not have generic unfettered shell
access.

frank