{"action":"created","issue":{"url":"https://api.github.com/repos/hilbert/hilbert-cli/issues/25","repository_url":"https://api.github.com/repos/hilbert/hilbert-cli","labels_url":"https://api.github.com/repos/hilbert/hilbert-cli/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/hilbert/hilbert-cli/issues/25/comments","events_url":"https://api.github.com/repos/hilbert/hilbert-cli/issues/25/events","html_url":"https://github.com/hilbert/hilbert-cli/issues/25","id":184110217,"number":25,"title":"Configuration design: Separate Access Management?","user":{"login":"malex984","id":391009,"avatar_url":"https://avatars.githubusercontent.com/u/391009?v=3","gravatar_id":"","url":"https://api.github.com/users/malex984","html_url":"https://github.com/malex984","followers_url":"https://api.github.com/users/malex984/followers","following_url":"https://api.github.com/users/malex984/following{/other_user}","gists_url":"https://api.github.com/users/malex984/gists{/gist_id}","starred_url":"https://api.github.com/users/malex984/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/malex984/subscriptions","organizations_url":"https://api.github.com/users/malex984/orgs","repos_url":"https://api.github.com/users/malex984/repos","events_url":"https://api.github.com/users/malex984/events{/privacy}","received_events_url":"https://api.github.com/users/malex984/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/hilbert/hilbert-cli/milestones/1","html_url":"https://github.com/hilbert/hilbert-cli/milestones/Configuration%20design","labels_url":"https://api.github.com/repos/hilbert/hilbert-cli/milestones/1/labels","id":2082308,"number":1,"title":"Configuration design","description":null,"creator":{"login":"elondaits","id":6472073,"avatar_url":"https://avatars.githubusercontent.com/u/6472073?v=3","gravatar_id":"","url":"https://api.github.com/users/elondaits","html_url":"https://github.com/elondaits","followers_url":"https://api.github.com/users/elondaits/followers","following_url":"https://api.github.com/users/elondaits/following{/other_user}","gists_url":"https://api.github.com/users/elondaits/gists{/gist_id}","starred_url":"https://api.github.com/users/elondaits/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elondaits/subscriptions","organizations_url":"https://api.github.com/users/elondaits/orgs","repos_url":"https://api.github.com/users/elondaits/repos","events_url":"https://api.github.com/users/elondaits/events{/privacy}","received_events_url":"https://api.github.com/users/elondaits/received_events","type":"User","site_admin":false},"open_issues":6,"closed_issues":10,"state":"open","created_at":"2016-10-20T11:39:41Z","updated_at":"2016-10-31T15:39:31Z","due_on":null,"closed_at":null},"comments":35,"created_at":"2016-10-20T00:50:48Z","updated_at":"2016-10-31T18:26:00Z","closed_at":null,"body":"Note: this is a separation of super-issue hilbert/hilbert-cli#13\n\n**Station: 4.5** Why do we need `key_ref`? If you configured passwordless ssh then you only need the username to connect. The correct key is picked by ssh. \n\n**Station: 4.6** Also, once again. I really don't understand why you'd ever publicize a private key and if I can't understand it and you can't explain it to me then you'll have a harder time explaining it to a customer or interested party. We shouldn't \"invent\" our own security mechanisms but instead use things already in place.\n"},"comment":{"url":"https://api.github.com/repos/hilbert/hilbert-cli/issues/comments/257377989","html_url":"https://github.com/hilbert/hilbert-cli/issues/25#issuecomment-257377989","issue_url":"https://api.github.com/repos/hilbert/hilbert-cli/issues/25","id":257377989,"user":{"login":"malex984","id":391009,"avatar_url":"https://avatars.githubusercontent.com/u/391009?v=3","gravatar_id":"","url":"https://api.github.com/users/malex984","html_url":"https://github.com/malex984","followers_url":"https://api.github.com/users/malex984/followers","following_url":"https://api.github.com/users/malex984/following{/other_user}","gists_url":"https://api.github.com/users/malex984/gists{/gist_id}","starred_url":"https://api.github.com/users/malex984/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/malex984/subscriptions","organizations_url":"https://api.github.com/users/malex984/orgs","repos_url":"https://api.github.com/users/malex984/repos","events_url":"https://api.github.com/users/malex984/events{/privacy}","received_events_url":"https://api.github.com/users/malex984/received_events","type":"User","site_admin":false},"created_at":"2016-10-31T18:26:00Z","updated_at":"2016-10-31T18:26:00Z","body":"Well, the current problem is: ssh access is pre-configured on the Server host (e.g. in `/etc/ssh/` & `${SPECIAL_USERS_HOME}/.ssh/` with further references to outside of these 2 directories) but we need to use it from within a docker container. \r\n\r\nIn https://github.com/hilbert/hilbert-cli/issues/25#issuecomment-257255709 @porst17 showed how to find out all possible references (hopefully accessible by that **SPECIAL_USER**)  to outside so that they can all be collected together in a single (temporary but well secured) place to be mounted into the container.\r\n\r\n**Update**: Another way to solve this issue: to **proxy** ALL ssh connections from within the docker container via Server Host, e.g. access any station `STATION` via `ssh SERVER ssh STATION command` but i am not sure whether that is a good idea or not...? "}}
{"actor":{"display_login":"malex984"}}