Compare commits

..

No commits in common. "b1e5992f0550d7e445ee9a0477cdae5b8a7507e7" and "69ce72aa7bcd86bd58577b8e7cba84b67f21d36f" have entirely different histories.

9 changed files with 14 additions and 30 deletions

View file

@ -1 +0,0 @@
{}

View file

@ -1,23 +1,19 @@
from base64 import b64decode, b64encode
from hashlib import sha3_256
from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
from cryptography.hazmat.primitives.serialization import Encoding, PrivateFormat, PublicFormat, NoEncryption
from cryptography.hazmat.primitives import serialization
def generate_ed25519_key_pair(secret):
privkey_bytes = Ed25519PrivateKey.from_private_bytes(secret)
nondeterministic_privatekey = privkey_bytes.private_bytes(
encoding=Encoding.PEM,
format=PrivateFormat.OpenSSH,
encryption_algorithm=NoEncryption()
encoding=serialization.Encoding.PEM,
format=serialization.PrivateFormat.OpenSSH,
encryption_algorithm=serialization.NoEncryption()
).decode()
# handle random 32bit number, occuring twice in a row
nondeterministic_bytes = b64decode(''.join(nondeterministic_privatekey.split('\n')[1:-2]))
random_bytes = sha3_256(secret).digest()[0:4]
deterministic_bytes = nondeterministic_bytes[:98] + random_bytes + random_bytes + nondeterministic_bytes[106:]
# handle random 32bit number, occuring twice in a row
deterministic_bytes = nondeterministic_bytes[:98] + b'00000000' + nondeterministic_bytes[106:]
deterministic_privatekey = '\n'.join([
'-----BEGIN OPENSSH PRIVATE KEY-----',
b64encode(deterministic_bytes).decode(),
@ -25,8 +21,8 @@ def generate_ed25519_key_pair(secret):
])
public_key = privkey_bytes.public_key().public_bytes(
encoding=Encoding.OpenSSH,
format=PublicFormat.OpenSSH,
encoding=serialization.Encoding.OpenSSH,
format=serialization.PublicFormat.OpenSSH,
).decode()
return (deterministic_privatekey, public_key)

View file

@ -1,11 +1,10 @@
{
'hostname': '10.0.0.5',
'groups': [
'autologin',
'backup-server',
'debian-11',
'home',
'backup-server',
'monitored',
'autologin',
],
'bundles': [
'smartctl',

View file

@ -1,9 +1,8 @@
{
'hostname': '10.0.2.8',
'groups': [
'autologin',
'home',
'raspberrymatic',
'autologin',
],
'bundles': [
'hostname',

View file

@ -1,8 +1,5 @@
{
'dummy': True,
'groups': [
'home',
],
'metadata': {
'id': '',
'network': {

View file

@ -1,13 +1,12 @@
{
'hostname': '10.0.0.17',
'groups': [
'autologin',
'backup',
'debian-11',
'home',
'monitored',
'raspberry-pi',
'webserver',
'autologin',
],
'bundles': [
'build-agent',

View file

@ -1,15 +1,14 @@
{
'hostname': '10.0.0.2',
'groups': [
'autologin',
'backup',
'debian-11',
'home',
'nextcloud',
'monitored',
'webserver',
'hardware',
'build-server',
'autologin',
],
'bundles': [
'apcupsd',

View file

@ -1,11 +1,10 @@
{
'hostname': '10.0.0.15',
'groups': [
'autologin',
'debian-11',
'home',
'raspberry-pi',
'monitored',
'autologin',
],
'bundles': [
'stromzaehler',

View file

@ -1,8 +1,5 @@
{
'dummy': True,
'groups': [
'home',
],
'metadata': {
'id': '',
'network': {