feat: add a user_ca_pubkey field to config, spec

With this, there's no need to install an SSH key into root's
authorized_keys file.

Sponsored-by: author

1 files changed, 4 insertions, 0 deletions

diff --git a/src/config.rs b/src/config.rs
index 034150b..37cd98e 100644
--- a/src/config.rs
+++ b/src/config.rs
@@ -41,6 +41,9 @@ pub struct Configuration {
 
     /// Path name to SSH CA key for creating SSH host certificates.
     pub ca_key: Option<PathBuf>,
+
+    /// Path name to SSH CA public key for verifying SSH user certificates.
+    pub user_ca_pubkey: Option<PathBuf>,
 }
 
 /// Errors from this module.
@@ -94,6 +97,7 @@ impl Configuration {
         expand_optional_pathbuf(&mut self.image_directory)?;
         expand_optional_pathbuf(&mut self.image_directory)?;
         expand_optional_pathbuf(&mut self.ca_key)?;
+        expand_optional_pathbuf(&mut self.user_ca_pubkey)?;
         expand_optional_pathbufs(&mut self.authorized_keys)?;
         Ok(())
     }