blob: b15ce1e15e087082cf60d35fb5db165be219b0a0 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
#!/usr/bin/env bash
# ssh key migration script, allow to replace old ssh key to new seamlessly
#
# Usage example as ssh command replacement:
#
# ssh() {
# if [ $# -eq 1 ]; then
# ssh-key-upgrade "$1"
# fi
# command ssh "$@"
# }
set -euo pipefail
SSH_KEY_UPGRADE_OLD_KEY="${SSH_KEY_UPGRADE_OLD_KEY:-$HOME/.ssh/id_rsa.pub}"
SSH_KEY_UPGRADE_NEW_KEY="${SSH_KEY_UPGRADE_ONEW_KEY:-$HOME/.ssh/id_ed25519.pub}"
main() {
local host="$1"
local keys='.ssh/authorized_keys'
local oldkey
oldkey=$(cat "${SSH_KEY_UPGRADE_OLD_KEY}")
if ssh "$host" "grep -Fq '$oldkey' '$keys'"; then
ssh-copy-id -i "$SSH_KEY_UPGRADE_NEW_KEY" "$host"
ssh "$host" "sed -i -e '\#$oldkey#d' $keys"
fi
}
main "$@"
|
