From 3eb38b74bdec9f95d5ddf70782a99502768e1625 Mon Sep 17 00:00:00 2001 From: Hermes Agent service account Date: Sat, 1 Aug 2026 21:06:07 -0500 Subject: [PATCH] jmri: add rblundon@laptop SSH key for xpra access Adds jmri_ssh_authorized_keys_extra list to support multiple authorized keys on the jmri account. Deploys rblundon's MacBook key so xpra can connect via SSH without a password. --- ansible/host_vars/main-street-station/vars.yml | 2 ++ ansible/roles/jmri/defaults/main.yml | 1 + ansible/roles/jmri/tasks/main.yml | 7 +++++++ 3 files changed, 10 insertions(+) diff --git a/ansible/host_vars/main-street-station/vars.yml b/ansible/host_vars/main-street-station/vars.yml index 3b8c2bb..6c1f28d 100644 --- a/ansible/host_vars/main-street-station/vars.yml +++ b/ansible/host_vars/main-street-station/vars.yml @@ -6,3 +6,5 @@ jmri_lcrr_branch: "clean-profile" jmri_leviton_email: "{{ leviton_email }}" jmri_leviton_password: "{{ leviton_password }}" jmri_ssh_authorized_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINnSM/9fO8rz/amqkyoGUzUKNNzzmtSXPwOCr1O9zKNO ansible" +jmri_ssh_authorized_keys_extra: + - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG6HaK4Y21UwPRbAZ986L7I9QnUdyq53114+9kO8X4bL rblundon@laptop" diff --git a/ansible/roles/jmri/defaults/main.yml b/ansible/roles/jmri/defaults/main.yml index 835db49..57c3c1c 100644 --- a/ansible/roles/jmri/defaults/main.yml +++ b/ansible/roles/jmri/defaults/main.yml @@ -22,6 +22,7 @@ jmri_lcrr_branch: "main" # SSH key for jmri user (for jmri-gui X11 access — set per-host in host_vars) jmri_ssh_authorized_key: "" +jmri_ssh_authorized_keys_extra: [] # additional keys (e.g. operator laptops) # SSH key for jmri user → Gitea jmri_gitea_key: /home/jmri/.ssh/id_ed25519_gitea diff --git a/ansible/roles/jmri/tasks/main.yml b/ansible/roles/jmri/tasks/main.yml index 76f92a8..2f39135 100644 --- a/ansible/roles/jmri/tasks/main.yml +++ b/ansible/roles/jmri/tasks/main.yml @@ -30,6 +30,13 @@ state: present when: jmri_ssh_authorized_key | length > 0 +- name: Deploy extra SSH authorized keys for jmri user + ansible.posix.authorized_key: + user: "{{ jmri_user }}" + key: "{{ item }}" + state: present + loop: "{{ jmri_ssh_authorized_keys_extra }}" + - name: Add JMRI user to dialout group (serial device access) ansible.builtin.user: name: "{{ jmri_user }}"