From 6d643bb3d3cea99cc35a80c8c86c577301129201 Mon Sep 17 00:00:00 2001 From: Runxi Yu Date: Fri, 14 Mar 2025 08:21:08 +0800 Subject: [PATCH] readme: Suggest /usr/local/lib/exec/tangled-keyfetch for keyfetch It's not appropriate to put binaries in /; binaries installed external to the package manager should be installed in /usr/local/bin or /usr/local/libexec on most systems. Since it's not meant to be executed by users directly, it's probably more appropriate to be in libexec; also, since "keyfetch" is a rather generic name, it's probably better to rename it as "tangled-keyfetch". Signed-off-by: Runxi Yu --- readme.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/readme.md b/readme.md index 74c56409..1e0666d4 100644 --- a/readme.md +++ b/readme.md @@ -39,13 +39,13 @@ go build -o keyfetch ./cmd/keyfetch go build -o repoguard ./cmd/repoguard ``` -Next, move the `keyfetch` binary to a location owned by `root` -- `/keyfetch` is -a good choice: +Next, move the `keyfetch` binary to a location owned by `root` -- +`/usr/local/libexec/tangled-keyfetch` is a good choice: ``` -sudo mv keyfetch /keyfetch -sudo chown root:root /keyfetch -sudo chmod 755 /keyfetch +sudo mv keyfetch /usr/local/libexec/tangled-keyfetch +sudo chown root:root /usr/local/libexec/tangled-keyfetch +sudo chmod 755 /usr/local/libexec/tangled-keyfetch ``` This is necessary because SSH `AuthorizedKeysCommand` requires [really specific @@ -54,7 +54,7 @@ permissions](https://stackoverflow.com/a/27638306). Let's set that up: ``` sudo tee /etc/ssh/sshd_config.d/authorized_keys_command.conf <