summaryrefslogtreecommitdiff
path: root/ec2-fetch-credentials.py
blob: 9ebc46349983f1015f735543c32266d23adb0faa (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
#!/usr/bin/python
#
#    Fetch login credentials for EC2 
#    Copyright 2008 Canonical Ltd.
#
#    Author: Soren Hansen <soren@canonical.com>
#
#    This program is free software: you can redistribute it and/or modify
#    it under the terms of the GNU General Public License as published by
#    the Free Software Foundation, either version 3 of the License, or
#    (at your option) any later version.
#
#    This program is distributed in the hope that it will be useful,
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#    GNU General Public License for more details.
#
#    You should have received a copy of the GNU General Public License
#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
import os
import pwd

import ec2init

def setup_user_keys(keys, user, key_prefix):
    pwent = pwd.getpwnam(user)

    os.umask(077)
    if not os.path.exists('%s/.ssh' % pwent.pw_dir):
        os.mkdir('%s/.ssh' % pwent.pw_dir)

    authorized_keys = '%s/.ssh/authorized_keys' % pwent.pw_dir
    fp = open(authorized_keys, 'a')
    fp.write(''.join(['%s%s\n' % (key_prefix, key) for key in keys]))
    fp.close()

    os.chown(authorized_keys, pwent.pw_uid, pwent.pw_gid)

def main():
    ec2 = ec2init.EC2Init()

    user = ec2.get_cfg_option_str('user')
    disable_root = ec2.get_cfg_option_bool('disable_root')

    keys = ec2.get_ssh_keys()

    if user:
        setup_user_keys(keys, user, '')
     
    if disable_root:
        key_prefix = 'command="echo \'Please login as the ubuntu user rather than root user.\';echo;sleep 10" ' 
    else:
        key_prefix = ''

    setup_root_user(keys, 'root', key_prefix)

if __name__ == '__main__':
    main()