I have two nearly identical scripts in network/if-up that need to access SSH keys. Permissions on SSH private keys are 600, so how can my scripts access these keys?
I would prefer to keep the SSH keys associated with a user account I set up for the task that these scripts perform.
I don't know how to find the user that runs the scripts in network/if-up and I also have not had any luck trying to use su -l -c "my_command" mytaskuser in my scripts. Hopefully I'm just making a simple mistake.
On Ubuntu my scripts are located in /etc/network/if-up.d and in other distros (e.g., openSuse) they are in etc/sysconfig/network/if-up.d.
Both my scripts look similar to this (I'll just use one example to keep the question focused):
#!/bin/sh
LOGDATE="_`date +%Y-%m-%d_%H%M`"
scp -i /home/mytaskuser/.ssh/id_rsa /home/mytaskuser/some.log [email protected]:somelog${LOGDATE}.log
exit 0
The script works totally correctly if I log in as mytaskuser and run it manually. It fails without any obvious error messages when run automatically from if-up.d/.
I have tried variations like this:
#!/bin/sh
LOGDATE="_`date +%Y-%m-%d_%H%M`"
su -l -c "scp -i /home/mytaskuser/.ssh/id_rsa /home/mytaskuser/some.log [email protected]:somelog${LOGDATE}.log" mytaskuser
exit 0
That hasn't worked. The only way the script works is when I run it while logged in as the user that owns the SSH key (id_rsa).
