Set up sesam user for SSH entry

files/platon/sesam-door-open.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+echo "`date` : $SSH_KEY_OWNER" >> /home/sesam/door_open.log
+ssh pi@localhost -i /home/sesam/.ssh/id_rsa  \
+    -t /home/pi/sesame-open.sh
+
+

platon.yml

@@ -28,3 +28,20 @@
         owner: root
         group: root
         mode: '0644'
+
+
+    ### Sesam for SSH access
+    #
+    # Make sure to provide the .ssh/authorized_keys from backup, if needed
+
+    - name: Ensure sesam user is there
+      ansible.builtin.user:
+        name: sesam
+        shell: /home/sesam/door-open.sh
+        groups: i2c
+        append: yes
+
+    - name: Copy door-open.ssh for sesam
+      ansible.builtin.copy:
+        src: files/platon/sesam-door-open.sh
+        dest: /home/sesam/door-open.sh