3 ms·

Not sure how you want to combine automated daily rsyncs with hardware keys. You can use OpenPGP for ssh authentication, and set it up so it prompts you when rsy

by jolmg 5y ago

Not sure how you want to combine automated daily rsyncs with hardware keys. You can use OpenPGP for ssh authentication, and set it up so it prompts you when rsync starts automatically. However, do you really want your automated jobs to depend on having a human to answer prompts or at least having a key inserted when it's scheduled to run? It sounds like there could be a better setup.

amelius 5y ago
My issue is that once I start using authorized_keys for automated processes, then it defeats the purpose of the key.
- jolmg 5y ago
  Why? authorized_keys holds public keys. Why would it defeat the purpose of a hardware private key?
  - amelius 5y ago
    Because if I can automatically log in through authorized_keys (used by my scripts), then it doesn't make sense to also have an authentication method that requires a key.
    - willis936 5y ago
      You could make an account with restricted permissions then use ssh-add for automated authentication.