From 5bf2c7096ee7da03e44a23060adaf0aee9a9a81f Mon Sep 17 00:00:00 2001 From: David Kim <dkim@gitlab.com> Date: Thu, 14 May 2020 20:48:01 +0000 Subject: [PATCH] Add AuthorizedKeysCommand note for installations from source --- doc/administration/operations/fast_ssh_key_lookup.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/doc/administration/operations/fast_ssh_key_lookup.md b/doc/administration/operations/fast_ssh_key_lookup.md index fdca043341278..6759c3f265d75 100644 --- a/doc/administration/operations/fast_ssh_key_lookup.md +++ b/doc/administration/operations/fast_ssh_key_lookup.md @@ -73,6 +73,12 @@ new one, and attempting to pull a repository. NOTE: **Note:** For Omnibus Docker, `AuthorizedKeysCommand` is setup by default in GitLab 11.11 and later. +NOTE: **Note:** For Installations from source, the command would be located at +`/home/git/gitlab-shell/bin/gitlab-shell-authorized-keys-check` if [the install from source](../../install/installation.md#install-gitlab-shell) instructions were followed. +You might want to consider creating a wrapper script somewhere else since this command needs to be +owned by `root` and not be writable by group or others. You could also consider changing the ownership of this command +as required, but that might require temporary ownership changes during `gitlab-shell` upgrades. + CAUTION: **Caution:** Do not disable writes until SSH is confirmed to be working perfectly, because the file will quickly become out-of-date. -- GitLab