orama/scripts/nodes.conf
anonpenguin23 6898f47e2e Replace sshpass password auth with RootWallet SSH keys
Replaces plaintext password-based SSH authentication (sshpass) across
the entire Go CLI with wallet-derived ed25519 keys via RootWallet.

- Add `rw vault ssh agent-load` command to RootWallet CLI for SSH
  agent forwarding in push fanout
- Create wallet.go bridge: PrepareNodeKeys resolves keys from `rw
  vault ssh get --priv`, writes temp PEMs (0600), zero-overwrites
  on cleanup
- Remove Password field from Node struct, update config parser to
  new 3-field format (env|user@host|role)
- Remove all sshpass branches from inspector/ssh.go and
  remotessh/ssh.go, require SSHKey on all SSH paths
- Add WithAgentForward() option to RunSSHStreaming for hub fanout
- Add PrepareNodeKeys + defer cleanup to all 7 entry points:
  inspect, monitor, push, upgrade, clean, recover, install
- Update push fanout to use SSH agent forwarding instead of sshpass
  on hub
- Delete install/ssh.go duplicate, replace with remotessh calls
- Create nodes.conf from remote-nodes.conf (topology only, no
  secrets)
- Update all config defaults and help text from remote-nodes.conf
  to nodes.conf
- Use StrictHostKeyChecking=accept-new consistently everywhere
2026-02-24 17:24:16 +02:00

43 lines
1.3 KiB
Plaintext

# Orama Network node topology
# Format: environment|user@host|role
# Auth: wallet-derived SSH keys (rw vault ssh)
#
# environment: devnet, testnet
# role: node, nameserver-ns1, nameserver-ns2, nameserver-ns3
# --- Devnet nameservers ---
devnet|ubuntu@57.129.7.232|nameserver-ns1
devnet|ubuntu@57.131.41.160|nameserver-ns2
devnet|ubuntu@51.38.128.56|nameserver-ns3
# --- Devnet nodes ---
devnet|ubuntu@144.217.162.62|node
devnet|ubuntu@51.83.128.181|node
devnet|ubuntu@144.217.160.15|node
devnet|root@46.250.241.133|node
devnet|root@109.123.229.231|node
devnet|ubuntu@144.217.162.143|node
devnet|ubuntu@144.217.163.114|node
devnet|root@109.123.239.61|node
devnet|root@217.76.56.2|node
devnet|ubuntu@198.244.150.237|node
devnet|root@154.38.187.158|node
# --- Testnet nameservers ---
testnet|ubuntu@51.195.109.238|nameserver-ns1
testnet|ubuntu@57.131.41.159|nameserver-ns1
testnet|ubuntu@51.38.130.69|nameserver-ns1
# --- Testnet nodes ---
testnet|root@178.212.35.184|node
testnet|root@62.72.44.87|node
testnet|ubuntu@51.178.84.172|node
testnet|ubuntu@135.125.175.236|node
testnet|ubuntu@57.128.223.149|node
testnet|root@38.242.221.178|node
testnet|root@194.61.28.7|node
testnet|root@83.171.248.66|node
testnet|ubuntu@141.227.165.168|node
testnet|ubuntu@141.227.165.154|node
testnet|ubuntu@141.227.156.51|node