feat(users): add mwiegand-agent login for agent sessions

Every linux node gets the user with the ssh-grant agent key and
passwordless sudo; the key only works while a grant is active.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh
This commit is contained in:
CroneKorkN 2026-10-23 11:29:35 +02:00
parent 052ff72358
commit 8a70691fea
No known key found for this signature in database

View file

@ -51,9 +51,16 @@
'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMVroYmswD4tLk6iH+2tvQiyaMe42yfONDsPDIdFv6I ckn', 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILMVroYmswD4tLk6iH+2tvQiyaMe42yfONDsPDIdFv6I ckn',
}, },
}, },
# agent sessions (ssh-grant): the key only works while a grant is active
'mwiegand-agent': {
'authorized_keys': {
'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDeU8FKtjN1+VjhxKZTzyvJ51GzPevrScXgou08hFmjb mwiegand-agent',
},
},
}, },
'sudoers': { 'sudoers': {
'ckn': {'ALL'}, 'ckn': {'ALL'},
'mwiegand-agent': {'ALL'},
}, },
}, },
} }