This document outlines how to utilize DEBs to grant the Steadfast Support Staff access to your server.

This package will work for Debian 9, Ubuntu 18.04, and later versions. Other comparable dpkg-based distributions may work but have not been tested. 

Adding the Steadfast Debian repository

You can install a DEB file on your system to automatically add the repository data to the apt configuration.

Install the steadfast-release DEB. 

wget https://mirror.steadfast.net/debian-steadfast/steadfast-release.deb
dpkg -i steadfast-release.deb

Installing the steadfast-keys DEB

After installing the steadfast-release DEB as above, you can use apt to install the steadfast-keys DEB.

Note: If you already have a /root/.ssh/authorized_keys2 file in place, this action will overwrite it. The existing file will be saved to /root/.ssh/authorized_keys2.orig.

# apt install steadfast-keys
 <snip>

 Complete!

Note that on the initial install you are prompted to import the GPG key. Verify that the key ID matches the information below:
Key ID: 47c9d9af
and answer "yes". This warning will only occur once.

At this point, the Steadfast Staff Public Keys have been installed to your system at /root/.ssh/authorized_keys2. To update the keys with the most recent list, run "apt update" on your system.

Removing access

If you've been supplied a system and you would like to revoke access for the Steadfast Support Staff to your system, simply remove the steadfast-keys RPM:

# apt remove steadfast-keys
 <snip>

 Complete!

You can verify that the deinstall took place by checking if the /root/.ssh/authorized_keys2 file still exists.