+6
-6
readme.md
+6
-6
readme.md
···
39
go build -o repoguard ./cmd/repoguard
40
```
41
42
-
Next, move the `keyfetch` binary to a location owned by `root` -- `/keyfetch` is
43
-
a good choice:
44
45
```
46
-
sudo mv keyfetch /keyfetch
47
-
sudo chown root:root /keyfetch
48
-
sudo chmod 755 /keyfetch
49
```
50
51
This is necessary because SSH `AuthorizedKeysCommand` requires [really specific
···
54
```
55
sudo tee /etc/ssh/sshd_config.d/authorized_keys_command.conf <<EOF
56
Match User git
57
-
AuthorizedKeysCommand /keyfetch
58
AuthorizedKeysCommandUser nobody
59
EOF
60
```
···
39
go build -o repoguard ./cmd/repoguard
40
```
41
42
+
Next, move the `keyfetch` binary to a location owned by `root` --
43
+
`/usr/local/libexec/tangled-keyfetch` is a good choice:
44
45
```
46
+
sudo mv keyfetch /usr/local/libexec/tangled-keyfetch
47
+
sudo chown root:root /usr/local/libexec/tangled-keyfetch
48
+
sudo chmod 755 /usr/local/libexec/tangled-keyfetch
49
```
50
51
This is necessary because SSH `AuthorizedKeysCommand` requires [really specific
···
54
```
55
sudo tee /etc/ssh/sshd_config.d/authorized_keys_command.conf <<EOF
56
Match User git
57
+
AuthorizedKeysCommand /usr/local/libexec/tangled-keyfetch
58
AuthorizedKeysCommandUser nobody
59
EOF
60
```