Git: push via ssh to a root owned repository with ssh root logins disabled
- by anthonysomerset
is that even possible?
Summary, i'm running puppet master on a server and ideally we want root logins via ssh disabled, we want to force all access via sudo if root access required
however we have puppet installed using a git repo to manage the manifests, this repo is currently owned by root and currently i only know of 2 solutions
(less ideal) allow root access via key auth only - if so, what can i lock it down to to only allow the git push commands?
own the repo in /etc/puppet as a different owner - will puppet work reliably with this?