auberge 0.9.0

CLI tool for managing self-hosted infrastructure with Ansible
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130

# auberge ssh keygen

Generate SSH key pair for host authentication

## Synopsis

```bash
auberge ssh keygen [OPTIONS]
```

## Alias

`auberge ss k`

## Description

Generates an ED25519 SSH key pair for authenticating to a host. Keys are stored in ~/.ssh/identities/ with the naming convention `{user}_{host}`.

Keys are generated without a passphrase for automated access (required for Ansible and backup operations).

## Options

| Option          | Description                     | Default               |
| --------------- | ------------------------------- | --------------------- |
| -H, --host HOST | Target host                     | Interactive selection |
| -u, --user USER | User (ansible or your username) | ansible               |
| -f, --force     | Force overwrite existing key    | false                 |

## Examples

```bash
# Generate key (interactive host selection)
auberge ssh keygen

# Generate for specific host
auberge ssh keygen --host myserver

# Generate for custom user
auberge ssh keygen --host myserver --user deploy

# Force overwrite existing key
auberge ssh keygen --host myserver --force
```

## Key Generation Process

1. Creates ~/.ssh/identities/ directory if needed
2. Generates ED25519 key pair:
   - Private key: ~/.ssh/identities/{user}_{host}
   - Public key: ~/.ssh/identities/{user}_{host}.pub
3. Sets comment to `{user}@{host}`
4. No passphrase (empty)

## Output Example

```
Generating SSH key for ansible@myserver
✓ Generated key: ~/.ssh/identities/ansible_myserver
  Public key: ~/.ssh/identities/ansible_myserver.pub
```

## Key Format

**Private key** (ED25519):

```
-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
...
-----END OPENSSH PRIVATE KEY-----
```

**Public key**:

```
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGx... ansible@myserver
```

## Next Steps

After generating a key, you need to authorize it on the remote host:

**Option 1: Use auberge ssh add-key** (recommended):

```bash
auberge ssh add-key --host myserver
```

**Option 2: Manual authorization**:

```bash
ssh-copy-id -i ~/.ssh/identities/ansible_myserver ansible@host
```

## Why ED25519?

- **Faster**: Much faster than RSA
- **More secure**: 256-bit security (equivalent to 3072-bit RSA)
- **Smaller keys**: Shorter fingerprints and public keys
- **Modern**: Supported by all current OpenSSH versions

## Key Storage Location

Keys are stored separately from ~/.ssh/ to:

- Avoid cluttering main SSH directory
- Enable per-host key management
- Support multiple users per host

## Troubleshooting

**Key already exists**:

- Use `--force` to overwrite
- Or manually delete: `rm ~/.ssh/identities/ansible_myserver{,.pub}`

**Permission denied**:

- Ensure ~/.ssh/identities/ directory is writable
- Check disk space

## Related Commands

- [auberge ssh add-key](add-key.md) - Authorize key on remote host
- [auberge host add](../host/add.md) - Add host with SSH key

## See Also

- [SSH Setup](../../getting-started/ssh-setup.md)
- [Security Best Practices](../../core-concepts/security.md)