veryroundbird.house / core
forked from tangled.org/core
this repo has no description
fork atom

readme: Suggest /usr/local/lib/exec/tangled-keyfetch for keyfetch

It's not appropriate to put binaries in /; binaries installed external
to the package manager should be installed in /usr/local/bin or
/usr/local/libexec on most systems. Since it's not meant to be executed
by users directly, it's probably more appropriate to be in libexec;
also, since "keyfetch" is a rather generic name, it's probably better to
rename it as "tangled-keyfetch".

Signed-off-by: Runxi Yu <me@runxiyu.org>

runxiyu.tngl.sh cb2e06dd 8cb69dae

options
unified split
Changed files
+6 -6
readme.md
+6 -6
readme.md 
···

       
39

       
 

       
go build -o repoguard ./cmd/repoguard


     

       
40

       
 

       
```


     

       
41

       
 

       



     

       
42

       
-

       
Next, move the `keyfetch` binary to a location owned by `root` -- `/keyfetch` is


     

       
43

       
-

       
a good choice:


     

       
44

       
 

       



     

       
45

       
 

       
```


     

       
46

       
-

       
sudo mv keyfetch /keyfetch


     

       
47

       
-

       
sudo chown root:root /keyfetch


     

       
48

       
-

       
sudo chmod 755 /keyfetch


     

       
49

       
 

       
```


     

       
50

       
 

       



     

       
51

       
 

       
This is necessary because SSH `AuthorizedKeysCommand` requires [really specific


     
···

       
54

       
 

       
```


     

       
55

       
 

       
sudo tee /etc/ssh/sshd_config.d/authorized_keys_command.conf <<EOF


     

       
56

       
 

       
Match User git


     

       
57

       
-

       
  AuthorizedKeysCommand /keyfetch


     

       
58

       
 

       
  AuthorizedKeysCommandUser nobody


     

       
59

       
 

       
EOF


     

       
60

       
 

       
```


     
···

       
39

       
 

       
go build -o repoguard ./cmd/repoguard


     

       
40

       
 

       
```


     

       
41

       
 

       



     

       
42

       
+

       
Next, move the `keyfetch` binary to a location owned by `root` --


     

       
43

       
+

       
`/usr/local/libexec/tangled-keyfetch` is a good choice:


     

       
44

       
 

       



     

       
45

       
 

       
```


     

       
46

       
+

       
sudo mv keyfetch /usr/local/libexec/tangled-keyfetch


     

       
47

       
+

       
sudo chown root:root /usr/local/libexec/tangled-keyfetch


     

       
48

       
+

       
sudo chmod 755 /usr/local/libexec/tangled-keyfetch


     

       
49

       
 

       
```


     

       
50

       
 

       



     

       
51

       
 

       
This is necessary because SSH `AuthorizedKeysCommand` requires [really specific


     
···

       
54

       
 

       
```


     

       
55

       
 

       
sudo tee /etc/ssh/sshd_config.d/authorized_keys_command.conf <<EOF


     

       
56

       
 

       
Match User git


     

       
57

       
+

       
  AuthorizedKeysCommand /usr/local/libexec/tangled-keyfetch


     

       
58

       
 

       
  AuthorizedKeysCommandUser nobody


     

       
59

       
 

       
EOF


     

       
60

       
 

       
```