Chat log for "demo of Remote-Agent-install over ssh" demo

Heiko W.Rupp hrupp at redhat.com
Wed Mar 26 15:00:17 UTC 2014


This the chat log for Mazz' demo of the remote agent install - Video is at https://www.youtube.com/watch?v=O0oSYXYe4Ro

[15:29:35] <pilhuhn>	 Yeah, mazz on TV https://www.youtube.com/watch?v=O0oSYXYe4Ro
[15:29:47] <pilhuhn>	 Everyone bring popcorn and the cheer leaders :-)
[15:31:14] <opuk>	 oh, interesting
[15:31:20] <pilhuhn>	Mazz, awesome!
[15:31:25] <pilhuhn>	 I see you(r screen)
[15:31:32] <mazz>	 cross your fingers it doesn't crah
[15:31:34] <mazz>	 crash
[15:33:45] <pilhuhn>	 Go Go Go ! :-)
[15:34:40] <pilhuhn>	opuk you can directly ask questions here and mazz will answer them live
[15:35:49] <opuk>	mazz: can one use ssh keys?
[15:37:05] <lkrejci>	 or not :)
[15:37:09] <opuk>	 awh
[15:37:12] <pilhuhn>	opuk +1
[15:37:32] <pilhuhn>	 and / or just defer to an ssh-agent on local box
[15:39:25] <pilhuhn>	 mazz can we make this red bar yellow or green, as this is not a fault condition if the test for no agent succeeds in the way that there is no agent yet
[15:42:22] <lkrejci>	mazz: so "Remote Agent Install" is not the only thing you can do on that page... what about renaming it?
[15:42:53] <stefan_n>	mazz, what happens if you never ever connected to a machine before? there is that initial ssh handshake where you need to confirm the identity of the other server for typical SSH client....
[15:43:09] <lzoubek>	mazz, what if you try to install agent to location where an existing agent is running?
[15:43:09] <mfoley>	 question from filip:  can I pass e.g. RHQ_AGENT_ADDITIONAL_JAVA_OPTS somehow?
[15:44:36] <lzoubek>	 nice :)
[15:45:20] <pilhuhn>	 I think we should add a popup to confirm the fingerprint -- if the user has to use the command line ssh client to add the agent host to .ssh/known_hosts, then he can also just copy the agent over
[15:45:57] <pilhuhn>	 Does that work with Unix only or is that available for Win too?
[15:46:30] <lzoubek>	 I think it deserves better "install status" presentation. when it's installing it's still showing old results from previous install (if any)
[15:47:25] <tsegismont>	 no bult-in ssh server
[15:47:29] <tsegismont>	 cygwin
[15:47:32] <pilhuhn>	 no, when you connect to a new box for the 1st time, ssh shows "this is the remote fingerprint ... do you want to continue"
[15:47:52] <stefan_n>	mazz, how about running JON Server on Windows ... so Windows is the SSH client not the destination for the agent
[15:47:54] <tsegismont>	 or http://www.freesshd.com/
[15:48:14] <pilhuhn>	 $ ssh user at host
[15:48:37] <pilhuhn>	 The authenticity of host 'host' (1.2.3.4) can't be established.
[15:48:37] <pilhuhn>	 RSA key fingerprint is 17:c1:67:06:b8:04:d8:90:e9....
[15:48:43] <pilhuhn>	 Are you sure you want to continue connecting (yes/no)?
[15:48:52] <pilhuhn>	 And this is what I think we need to show in the UI
[15:49:50] <lkrejci>	 pilhuhn: mazz: we do need the fingerprint confirmation... because it's not the *user's machine* that connects to the target machine, it's the JON server's machine..
[15:50:15] <tsegismont>	 it's the client which should put the fingerprint in the known hosts file
[15:50:17] <tsegismont>	 not the server
[15:50:24] <lkrejci>	 so the user cannot just ssh user at host from his local box... it'd had to be done from the JON server's box
[15:51:06] <pilhuhn>	 ( you can just remove that line from known_hosts to get this fingerprint dialog again)
[15:51:41] <pilhuhn>	 Ok, we will figure that out
[15:51:41] <lkrejci>	mazz: the target machine does not do the authorization.. it's the connecting machine (i.e. JON server) asks if it is safe to the target machine
[15:51:53] <tsegismont>	lkrejci, right
[15:52:29] <pilhuhn>	 no, this fingerprint is about the rhq-server-user on the server allowing to connect to the not-yet-known host
[15:52:32] <lkrejci>	 no
[15:52:43] <lkrejci>	 no :)
[15:53:03] <lkrejci>	 if it is safe to connect to the target machine...
[15:53:04] <pilhuhn>	 this is not about authorized hosts, but about known_hosts
[15:53:22] <lkrejci>	 yep
[15:54:23] <lzoubek>	 could we add deploying agent to multiple hosts when using same user/pass or key?
[15:54:37] <pilhuhn>	 so the server "just" needs to show the dialog I've pasted above, and if the user clicks "ok", we add the agent-box to known_hosts and next time the rhq-server will not ask this again
[15:54:57] <tsegismont>	 pilhuhn, +1
[15:54:58] <pilhuhn>	lzoubek good question. Like giving host names in ; separated manner for all to install
[15:56:16] <tsegismont>	 jsch supports key based authentication, it would be a nice add
[15:56:23] <pilhuhn>	tsegismont +1
[15:56:33] <pilhuhn>	 and / or just deferring to a local ssh-agent
[15:57:07] <lkrejci>	 pilhuhn: local == JON server, so it's not that easy for a UI user to talk to it
[15:57:58] <tsegismont>	 thanks mazz
[15:58:20] <mfoley>	 that was great!
[15:58:20] <lkrejci>	 thanks mazz, good to see this advertised
[15:58:24] <mfoley>	 lots of ideas for testcases!
[15:58:34] <pilhuhn>	 Thank you mazz !!!
[15:58:38] <ahovsepy>	 thank you mazz

-- 
Reg. Adresse: Red Hat GmbH, Technopark II, Haus C, 
Werner-von-Siemens-Ring 14, D-85630 Grasbrunn
Handelsregister: Amtsgericht München HRB 153243
Geschäftsführer: Charles Cachera, Michael Cunningham, Paul Hickey, Charlie Peters



More information about the rhq-devel mailing list