[Box-Admins] Private keys

[Chris Cunnington]

On 2013-01-09 8:22 AM, Frank Shearar wrote:
> On 9 January 2013 13:16, Chris Cunnington <smalltalktelevision at gmail.com> wrote:
>> On 2013-01-09 5:09 AM, Frank Shearar wrote:
>>> Hi,
>>>
>>> I need to somehow get private keys for the angband and norst nodes
>>> securely onto squeakci.org. My preference is to use scp, but that
>>> requires shell access. I don't think that, in general, we want shell
>>> access for teamjenkins. Ideas on how to proceed?
>>>
>>> (I want to set up the two nodes to have Jenkins ssh to them, because
>>> that might be easier than hacking on slaves authenticating to the
>>> server.)
>>>
>>> frank
>> Well, I guess you need to send the keys to a person with shell access. Ken
>> is likely the best person for that, as he manages keys all the time.
>>
>> Chris
> Yes, but that just changes the problem to "how can I pass the keys to
> Ken in a secure manner?"
>
> Apparently giving a user the shell "rssh" lets a user do things like
> move files, rsync and such, but not have generic unfettered shell
> access.
>
> frank
There is something here I don't understand. A public key I've seen Colin 
post on a message board to be copied. Or you could zip them and send 
them to Ken?
So, I'm not sure what's required here. Is the key a thing you can send 
to somebody else? If so, then you could send it to Ken?

Chris