testrunner: publish a ssh:// url

following this spec: http://www.iana.org/assignments/uri-schemes/prov/ssh

software/slaprunner/buildout.hash.cfg

@@ -18,7 +18,7 @@ md5sum = f0cab61c7b8478afb8b676fc725d50d5
 
 [template-runner]
 filename = instance-runner.cfg
-md5sum = d9096d49eda70f3aa02c44615077f6c9
+md5sum = de8e5696d8702f85024ac88f5935636c
 
 [template-runner-import-script]
 filename = template/runner-import.sh.jinja2

software/slaprunner/instance-runner.cfg

@@ -323,6 +323,18 @@ recipe = slapos.cookbook:dropbear.add_authorized_key
 home = $${buildout:directory}
 key = $${slap-parameter:user-authorized-key}
 
+[runner-sshkeys-publickey-fingerprint-cmd]
+recipe = plone.recipe.command
+command = $${runner-sshkeys-authority:keygen-binary} -E md5 -lf $${runner-sshkeys-sshd:public-key} | cut  -f 2 -d\ | sed s/MD5/ssh-rsa/g | sed s/:/-/g
+
+[runner-sshkeys-publickey-fingerprint]
+recipe = collective.recipe.shelloutput
+# XXX because collective.recipe.shelloutput ignore errors, we run the same
+# command in a plone.recipe.command so that if fails if something goes wrong.
+commands =
+  fingerprint = $${runner-sshkeys-publickey-fingerprint-cmd:command}
+
+
 #---------------------------
 #--
 #-- Set nginx frontend
@@ -610,6 +622,7 @@ backend-url = $${slaprunner:access-url}
 init-user = $${runner-htpasswd:user}
 init-password = $${runner-htpasswd:password}
 ssh-command = ssh $${user-info:pw-name}@$${slap-network-information:global-ipv6} -p $${runner-sshd-port:port}
+ssh-url = ssh://$${user-info:pw-name};fingerprint=$${runner-sshkeys-publickey-fingerprint:fingerprint}@[$${slap-network-information:global-ipv6}]:$${runner-sshd-port:port}
 git-public-url = https://[$${httpd-parameters:global_ip}]:$${httpd-parameters:global_port}/git-public/
 git-private-url = https://[$${httpd-parameters:global_ip}]:$${httpd-parameters:global_port}/git/
 monitor-base-url = $${monitor-publish-parameters:monitor-base-url}

software/slaprunner/software.cfg

@@ -139,6 +139,7 @@ eggs =
   erp5.util
   lock-file
   plone.recipe.command
+  collective.recipe.shelloutput
   slapos.recipe.build
   slapos.toolbox[flask_auth]
   gunicorn==19.7.1
@@ -162,6 +163,7 @@ gunicorn = 19.7.1
 prettytable = 0.7.2
 pycurl = 7.43.0
 slapos.recipe.template = 4.3
+collective.recipe.shelloutput = 0.1
 collective.recipe.environment = 0.2.0
 smmap = 0.9.0
 lockfile = 0.12.2