Create setupaccess.yml

.github/workflows/setupaccess.yml

@@ -0,0 +1,25 @@
+name: Setup Access
+
+on:
+  workflow_dispatch:  # Manual trigger
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest 
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+
+      - name: Install expect
+        run: sudo apt-get install expect
+
+      - name: Add permission for script to run
+        run: chmod +x setupaccess.sh
+      
+      - name: Run Bash Scripts
+        env:
+          PASSPHRASE_GROUP17: ${{ secrets.PASSPHRASE_GROUP17 }}
+          GROUP17_PUBLICKKEY: ${{ secrets.GROUP17_PUBLICKKEY }}
+          GROUP17_PRIVATEKEY: ${{ secrets.GROUP17_PRIVATEKEY }}
+        run: expect setupaccess.exp "$PASSPHRASE_GROUP17" # this one has code triggering setupaccess.sh, so command ultimately runs multiple scripts :)

setupaccess.exp

@@ -1,8 +1,13 @@
 #!/usr/bin/expect -f
+set PASSPHRASE_GROUP17 [lindex $argv 0]
 spawn ./setupaccess.sh
-set timeout 2
+set timeout 5
+expect "The authenticity of host"
+send "yes\r"
 expect "Enter passphrase for key 'group17':\r"
 send "$PASSPHRASE_GROUP17\r"
 expect "Enter passphrase for key 'group17':\r"
 send "$PASSPHRASE_GROUP17\r"
-expect eof
+expect "Enter passphrase for key 'group17':\r"
+send "$PASSPHRASE_GROUP17\r"
+expect eof

setupaccess.sh

@@ -17,11 +17,29 @@ echo "setupaccess.sh: remove known host keys for the server to avoid the REMOTE
 cat group17.pub > authorized_keys
 echo "setupaccess.sh: make an authorized_keys file with group17.pub as an authorized key"
 
-scp -o StrictHostKeyChecking=no -i group17 -P 22017 authorized_keys student-admin@paffenroth-23.dyn.wpi.edu:/home/student-admin/.ssh
-echo "setupaccess.sh: copy authorized_keys file to server"
+rm group17.pub
+echo "setupaccess.sh: remove group17.pub file from host"
+
+scpOutput=$(scp -o StrictHostKeyChecking=no -i group17 -P 22017 authorized_keys [email protected]:/home/student-admin/.ssh 2>&1)
+echo "setupaccess.sh: try to copy authorized_keys file to server"
+
+if [[ "$scpOutput" = *"[email protected]: Permission denied (publickey)."* ]];
+then touch student-admin_key
+    echo "$STUDENT_ADMIN_KEY" > student-admin_key
+    echo "setupaccess.sh: make student-admin_key file"
+    scp -o StrictHostKeyChecking=no -i student-admin_key -P 22017 authorized_keys [email protected]:/home/student-admin/.ssh
+    echo "setupaccess.sh: copied authorized_keys file to server with student-admin_key"
+    rm student-admin_key
+    echo "setupaccess.sh: remove student-admin_key from host"
+else
+    echo "setupaccess.sh: copied authorized_keys file to server with our private key"
+fi
 
 rm authorized_keys
 echo "setupaccess.sh: remove authorized_keys file from host"
 
 ssh -p 22017 -i group17 -o StrictHostKeyChecking=no [email protected]
-echo "setupaccess.sh: try to ssh in"
+echo "setupaccess.sh: try to ssh in"
+
+rm group17
+echo "setupaccess.sh: remove group17 file from host"