seang96/nixos-config
1
0
Fork 0
mirror of https://github.com/buckley310/nixos-config.git synced 2024-12-21 19:24:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

deploy: fail if StrictHostKeyChecking != yes

Browse source
This commit is contained in:
Sean Buckley 2023-03-31 11:31:56 -04:00
parent af985de946
commit 66dc581483
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
pkgs/deploy/deploy.py
View file

@ -7,6 +7,12 @@ from subprocess import run, PIPE, STDOUT
from sys import argv from sys import argv
def strict_host_key_checking():
txt = run(["ssh", "-G", "localhost"], stdout=PIPE).stdout
if "stricthostkeychecking true" not in txt.decode("utf8").splitlines():
raise RuntimeError("This script requires StrictHostKeyChecking")
def get_deployment(): def get_deployment():
return loads( return loads(
run( run(
@ -177,6 +183,7 @@ def main():
icon_bad = "\u274c" icon_bad = "\u274c"
icon_good = "\u2705" icon_good = "\u2705"
strict_host_key_checking()
depl = get_deployment() depl = get_deployment()
if __name__ == "__main__": if __name__ == "__main__":
main() main()