use token

Signed-off-by: Kiara Grouwstra <kiara@procolix.eu>
This commit is contained in:
Kiara Grouwstra 2025-10-21 16:54:50 +02:00
parent 80570064a9
commit 09297b9b4e
Signed by: kiara
SSH key fingerprint: SHA256:COspvLoLJ5WC5rFb9ZDe5urVCkK4LJZOsjfF4duRJFU

View file

@ -159,12 +159,9 @@ in
set -e set -e
pvesh create /pools --poolid Fediversity pvesh create /pools --poolid Fediversity
pvesh set /storage/local --content "vztmpl,rootdir,backup,snippets,import,iso,images" 1>/dev/null pvesh set /storage/local --content "vztmpl,rootdir,backup,snippets,import,iso,images" 1>/dev/null
pvesh create /access/groups --groupid "roots" pvesh create /access/users/root@pam/token/mytoken --output-format json | jq -r .value
pvesh set /access/users/root@pam --enable 1 --groups "roots" pvesh set /access/acl --path "/" --token "root@pam!mytoken" --roles "Administrator"
pvesh set /access/acl --path "/" --roles "Administrator" --groups "roots"
pvesh create /access/users/root@pam/token/mytoken --privsep 0 --output-format json | jq -r .value
""").strip() """).strip()
# FIXME pass separate privileges rather than disabling privsep
# skip indent for EOF # skip indent for EOF
deployer.succeed(f""" deployer.succeed(f"""