···

       
1
       
1
       
+
       
// This program must be configured to run as the sshd AuthorizedKeysCommand.

     

       
2
       
2
       
+
       
// The format looks something like this:

     

       
3
       
3
       
+
       
//   Match User git

     

       
4
       
4
       
+
       
//     AuthorizedKeysCommand /keyfetch -internal-api http://localhost:5444 -repoguard-path /home/git/repoguard

     

       
5
       
5
       
+
       
//     AuthorizedKeysCommandUser nobody

     

       
6
       
6
       
+
       
//

     

       
7
       
7
       
+
       
// The command and its parent directories must be owned by root and set to 0755. Hence, the ideal location for this is

     

       
8
       
8
       
+
       
// somewhere already owned by root so you don't have to mess with directory perms.

     

       
9
       
9
       
+
       


     

       
1
       
10
       
 
       
package main

     

       
2
       
11
       
 
       


     

       
3
       
12
       
 
       
import (