synckeys 1.0.1

A simple script to manage the deployment of your ssh keys on your servers

synckeys is a simple project to manage the deployment of ssh keys of multiple people on multiple servers.

The usage is quite simple:

• list all the ssh keys you want to manage in keys.yml

• list all the projects in acl.yml and link them to the corresponding authorized keys

• just run synckeys: all servers you are allowed to access will be synced with the correct keys

The principles behind synckeys

What you see is what you get is more secure

The list of projects is a straightforward yaml list:

• much more readable than a shell script or a fancy provisioning

• accessed much more often

• by more people (devs and sysadmins) you trust

Therefore you get the magic of self-management and avoid the common pitfalls:

• keys of ex-employees staying forever on the servers

• non-personal keys that get shared too widely

And many more of the things you can expect when smart people you trust ca take action quickly when they see something wrong.

Every dev or sysadmin in the organisation can use it

The syncing rule is simple: if you have a certain access on a server, you can give the same access to somebody else.

This might seem straightforward but this is not what you get when you use a solution like puppet, chef or ansible. These provisioning solutions are mostly run as root on the destination server, therefore disallowing a non-root user to contribute.