This document outlines how to utilize RPMs to grant access to the Steadfast Staff access to your server.

Adding the centos-steadfast repository

You can install an RPM to your system to automatically add the repository data to the yum configuration.

Install the steadfast-release RPM.  There's no need to change the version or architecture in the URL as the repository package file is identical for all versions of CentOS.

# rpm -ivh http://mirror.steadfast.net/centos-steadfast/7/x86_64/steadfast-release-1-2.noarch.rpm
 Retrieving http://mirror.steadfast.net/centos-steadfast/7/x86_64/steadfast-release-1-2.noarch.rpm
 Preparing... ########################################### [100%]
 1:steadfast-release ########################################### [100%]
 

Installing the steadfast-keys RPM

After installing the steadfast-release RPM as above, you can use yum to install the steadfast-keys RPM.

Note: If you already have a /root/.ssh/authorized_keys2 file in place, this action will overwrite it. The existing file will be saved to /root/.ssh/authorized_keys2.rpmorig.

# yum install steadfast-keys
 <snip>
 Transaction Summary
 ================================================================================
 Install 1 Package(s)
 Upgrade 0 Package(s)
 
 Total download size: 13 k
 Is this ok [y/N]: y
 Downloading Packages:
 steadfast-keys-20110706-1.noarch.rpm | 13 kB 00:00 
 warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID 443f9b4e
 steadfast/gpgkey | 2.3 kB 00:00 
 Importing GPG key 0x443F9B4E "Steadfast Networks <support@steadfast.net>" from /etc/pki/rpm-gpg/RPM-GPG-KEY-steadfastnetworks
 Is this ok [y/N]: y
 <snip>
 Running Transaction
 Installing : steadfast-keys 1/1 
 
 Installed:
 steadfast-keys.noarch 0:20110706-1 
 
 Complete!

Note that on the initial install you are prompted to import the GPG key. Verify that the key ID matches the information below:
Key ID: 443F9B4E
and answer "yes". This warning will only occur once.

At this point, the Steadfast Staff Public Keys have been installed to your system at /root/.ssh/authorized_keys2. To update the keys with the most recent list, run "yum update" on your system.

Removing access

If you've been supplied a system and you would like to revoke access for the Steadfast Support Staff to your system, simply remove the steadfast-keys RPM:

# yum remove steadfast-keys
 <snip>
 Removing:
 steadfast-keys noarch 20110706-1 installed 15 k
 
 Transaction Summary
 ================================================================================
 Remove 1 Package(s)
 Reinstall 0 Package(s)
 Downgrade 0 Package(s)
 
 Is this ok [y/N]: y
 <snip>
 Running Transaction
 Erasing : steadfast-keys 1/1 
 
 Removed:
 steadfast-keys.noarch 0:20110706-1 
 
 Complete!

You can verify that the deinstall took place by checking if the /root/.ssh/authorized_keys2 file still exists.