• virt-manager with SSH and 2FA with TOTP?

    From Andreas Haumer@21:1/5 to All on Fri Apr 11 14:40:01 2025
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------ll40pbatUu8gCsbFZ8IOh8D0
    Content-Type: multipart/mixed; boundary="------------ss8sKpxrraoOoRVN0h60BwI2"

    --------------ss8sKpxrraoOoRVN0h60BwI2
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGkhDQoNCihUaGlzIG1pZ2h0IG5vdCBiZSBhIERlYmlhbiBzcGVjaWZpYyBxdWVzdGlvbiwg YnV0IGF0IGxlYXN0DQp0aGUgc3lzdGVtcyBpbiBxdWVzdGlvbiBhcmUgcnVubmluZyBEZWJp YW4sIHNvIEkgaG9wZSBpdCdzDQpPSyB0byBhc2sgaGVyZSBvbiB0aGlzIGxpc3QuIFBsZWFz ZSBnaXZlIG1lIGEgaGludCBpZiB5b3Uga25vdw0KYSBiZXR0ZXIgcGxhY2UgdG8gYXNrKQ0K DQpJbiBvdXIgbmV0d29yayB3ZSBoYXZlIHNldmVyYWwgRGViaWFuIHN5c3RlbXMgd29ya2lu ZyBhcyBWTSBob3N0DQpydW5uaW5nIFFFTVUrS1ZNIGJhc2VkIHZpcnR1YWwgbWFjaGluZXMu DQoNCkkgdXN1YWxseSB1c2UgdmlydC1tYW5hZ2VyIG9uIG15IHdvcmtzdGF0aW9uIGFzIEdV SSB0byBjb25uZWN0DQp0byB0aGUgVk0gaG9zdCwgbWFuYWdlIHRoZSBWTXMgYW5kIGFsc28g dG8gY29ubmVjdCB0byB0aGUgVk0NCmNvbnNvbGUgaWYgbmVlZGVkLg0KDQpUbyBjb25uZWN0 IHRvIHRoZSBWTSBob3N0IEkgdXNlIFNTSCB3aXRoIHB1YmxpYyBrZXkgYXV0aGVudGljYXRp b24uDQoNCk9uIHRoZSBjb21tYW5kbGluZSB3aXRoIHZpcnNoIHRoaXMgbG9va3MgbGlrZSB0 aGlzIChleGFtcGxlKToNCg0KYW5kcmVhc0B3czE6fj4gdmlyc2ggLWMgcWVtdStzc2g6Ly9y b290QG1heHdlbGwvc3lzdGVtDQpXZWxjb21lIHRvIHZpcnNoLCB0aGUgdmlydHVhbGl6YXRp b24gaW50ZXJhY3RpdmUgdGVybWluYWwuDQoNClR5cGU6ICAnaGVscCcgZm9yIGhlbHAgd2l0 aCBjb21tYW5kcw0KICAgICAgICAncXVpdCcgdG8gcXVpdA0KDQp2aXJzaCAjDQoNClNvIGZh ciwgc28gZ29vZC4NCg0KUmVjZW50bHkgSSBkZWNpZGVkIHRvIGluY3JlYXNlIG91ciBpbnRl cm5hbCBuZXR3b3JrIHNlY3VyaXR5IHN0YW5kYXJkcw0KYW5kIGFjdGl2YXRlZCAyRkEgd2l0 aCB0aW1lLWJhc2VkIG9uZS10aW1lIHBhc3N3b3JkcyBvbiBzZXZlcmFsIGhvc3RzLg0KKFRo ZSBpZGVhIGlzIHRvIGV2ZW50dWFsbHkgaGF2ZSAyRkEgZm9yIFNTSCBmb3IgYWxsIHVzZXJz IG9uIGFsbCBob3N0cw0KaW4gb3VyIG5ldHdvcmspDQoNClRoaXMgd29ya3MgdmVyeSB3ZWxs IGFuZCBldmVuIHF1aXRlIGNvbWZvcnRhYmxlIHdpdGggYXV0aGVudGljYXRvci1hcHBzDQpv biBteSBzbWFydHBob25lIG9yIEtlZVBhc3NYQyBvbiBteSB3b3Jrc3RhdGlvbiBnZW5lcmF0 aW5nIHRoZSBUT1RQLg0KDQpFeGFtcGxlOg0KDQphbmRyZWFzQHdzMTp+PiBzc2ggcm9vdEBt YWNoDQpFbnRlciBPVFA6DQpMaW51eCBtYWNoIDYuMS4wLTMyLWFtZDY0ICMxIFNNUCBQUkVF TVBUX0RZTkFNSUMgRGViaWFuIDYuMS4xMjktMSAoMjAyNS0wMy0wNikgeDg2XzY0DQpyb290 QG1hY2g6fiMNCg0KU28gZm9yIGEgc3VjY2Vzc2Z1bCBTU0ggY29ubmVjdGlvbiBJIG5vdyBo YXZlIHRvIGVudGVyIGEgdmFsaWQgVE9UUCAoZ2VuZXJhdGVkIGJ5IHRoZQ0KYXV0aGVudGlj YXRvciBhcHApIGFuZCB0aGVuIGl0IGNvbm5lY3RzLg0KDQpDb25uZWN0aW5nIHRvIHRoZSBo b3N0IHdpdGggdmlyc2ggb24gdGhlIGNvbW1hbmRsaW5lIGFsc28gd29ya3MgaW4gYSBzaW1p bGFyIHdheToNCg0KYW5kcmVhc0B3czE6fj4gdmlyc2ggLWMgcWVtdStzc2g6Ly9yb290QG1h Y2gvc3lzdGVtDQpFbnRlciBPVFA6DQpXZWxjb21lIHRvIHZpcnNoLCB0aGUgdmlydHVhbGl6 YXRpb24gaW50ZXJhY3RpdmUgdGVybWluYWwuDQoNClR5cGU6ICAnaGVscCcgZm9yIGhlbHAg d2l0aCBjb21tYW5kcw0KICAgICAgICAncXVpdCcgdG8gcXVpdA0KDQp2aXJzaCAjDQoNCkFs bCBmaW5lLiBXb3JrcyBhcyBkZXNpZ25lZC4uLg0KDQpXaGVuIEkgdXNlIHZpcnQtbWFuYWdl ciB0byBjb25uZWN0IHRvIHRoZSBWTSBob3N0LCB0aGUgR1VJIG9wZW5zDQphIGRpYWxvZyBh c2tpbmcgZm9yIHRoZSBPVFAgYW5kIHRoZW4gY29ubmVjdHMsIHNob3dpbmcgdGhlIGxpc3Qg b2YNCmFsbCBjb25maWd1cmVkIFZNcyBldGMuIEkgY2FuIGFsc28gb3BlbiB0aGUgY29uZmln dXJhdGlvbiBvZiBhDQpnaXZlbiBWTSwgbWFuYWdlIGFuZCBjaGFuZ2UgaXQuDQoNCkFsbCBm aW5lLCB0b28uLi4NCg0KQnV0IHdoZW4gSSB0cnkgdG8gdXNlIHZpcnQtbWFuYWdlciB0byBj b25uZWN0IHRvIHRoZSBjb25zb2xlIG9mIGENCnNwZWNpZmljIFZNLCBpdCBkb2Vzbid0IHdv cmsgYXMgZXhwZWN0ZWQuDQp2aXJ0LW1hbmFnZXIgb3BlbnMgYSBuZXcgd2luZG93IGZvciB0 aGUgY29uc29sZSwgYnV0IGFsc28gZW5kbGVzc2x5DQprZWVwcyBvcGVuaW5nIHBhc3N3b3Jk IGVudHJ5IGRpYWxvZ3MuDQpBcyBzb29uIGFzIEkgZW50ZXIgdGhlIGN1cnJlbnQgT1RQIGFu ZCBrbGljayAib2siLCBhbm90aGVyIGRpYWxvZw0KaXMgb3BlbmVkLCBhZ2FpbiBhc2tpbmcg Zm9yIGFub3RoZXIgT1RQLiBBbmQgc28gb24uLi4NCihUaGVzZSBhcmUgb25lLXRpbWUgcGFz c3dvcmRzLCB2YWxpZCBmb3IgMzAgc2Vjb25kcywgd2hpY2ggY2Fubm90IGJlIHJlLXVzZWQp DQoNCkkgY2FuIGNvbm5lY3QgdG8gdGhlIFZNIGNvbnNvbGUgd2l0aCBhIFNQSUNFIHZpZXdl ciBsaWtlIHJlbW1pbmENCnVzaW5nIFNTSCBwb3J0IGZvcndhcmRpbmcgbGlrZSB0aGlzOg0K DQphbmRyZWFzQHdzMTp+PiBzc2ggLUwgNTkwNjpsb2NhbGhvc3Q6NTkwNiByb290QG1hY2gN CkVudGVyIE9UUDoNCnJvb3RAbWFjaDp+Iw0KDQood2hlcmUgNTkwNiBpcyB0aGUgU1BJQ0Ug cG9ydCBmb3IgdGhlIFZNIGluIHF1ZXN0aW9uKQ0KDQpBbmQgdGhlbiB1c2UgcmVtbWluYSB0 byBjb25uZWN0IHRvIHBvcnQgNTkwNiBvbiBsb2NhbGhvc3QuDQpUaGlzIGdpdmVzIG1lIHRo ZSBTUElDRSBjb25zb2xlIG9mIHRoZSBWTS4NCg0KT2YgY291cnNlLCB0aGlzIGlzIG5vdCBh cyBjb21mb3J0YWJsZSBhcyB1c2luZyB2aXJ0LW1hbmFnZXIuDQpCdXQgd2l0aCB2aXJ0LW1h bmFnZXIgSSBoYXZlbid0IGZvdW5kIGEgd2F5IHRvIHN1Y2Nlc3NmdWxseQ0KY29ubmVjdCB0 byB0aGUgVk0gY29uc29sZSB3aXRoIDJGQSBpbiBwbGFjZS4NCg0KU28sIGZpbmFsbHksIG15 IHF1ZXN0aW9uOiBEaWQgYW55b25lIG9uIHRoaXMgbGlzdCBtYW5hZ2UgdG8NCnVzZSB2aXJ0 LW1hbmFnZXIgdG8gY29ubmVjdCB0byBhIFZNIGNvbnNvbGUgdXNpbmcgU1NIIHdpdGggMkZB Pw0KDQpUaGFua3MhDQoNCi0gYW5kcmVhcw0KDQotLSANCkFuZHJlYXMgSGF1bWVyDQoqeCBT b2Z0d2FyZSArIFN5c3RlbWUgICAgICAgICAgICAgIHwgbWFpbHRvOmFuZHJlYXNAeHNzLmNv LmF0DQpLYXJtYXJzY2hnYXNzZSA1MS8yLzIwICAgICAgICAgICAgIHwgaHR0cHM6Ly93d3cu eHNzLmNvLmF0Lw0KQS0xMTAwIFZpZW5uYSwgQXVzdHJpYSAgICAgICAgICAgICB8IFRlbDog KzQzLTEtNjA2MDExNA0KDQo=
    --------------ss8sKpxrraoOoRVN0h60BwI2
    Content-Type: application/pgp-keys; name="OpenPGP_0xC499B27867173E11.asc" Content-Disposition: attachment; filename="OpenPGP_0xC499B27867173E11.asc" Content-Description: OpenPGP public key
    Content-Transfer-Encoding: quoted-printable

    -----BEGIN PGP PUBLIC KEY BLOCK-----

    xsDiBDwjSoQRBADBEiFcN/v/9u36R8qp+ga0yImoB5sLPju00IE4ZuFatWLZ5Kuy pDTigfcTgvkf7uh1/c2GbV0iME2dPxxxplOFHrrwhWfLXAF/Zx8EPBMXGYe/1nT4 FjtSA+dYzLWNIRSrkgQe/Sck3zsRtnbfqlVx9A8twHYZkGJqCxuxnGmx9wCgxNWC AIJOUQmayakDvKES0ezIJaMD/jydeN1dONqJKRbuPCMDFXgRlEG79Hd7V6L7MH2F ogp9x2pjtqPdRTz72LNtgJX4TcTsDDq9Mz3R7SyngeedZ68rKQtBul9g8E38ocRm omD8VsjoY+t/43kDB2snWOf7EO80BKb8q2cG4GaRig/csO6+T1xfGGYIDz5Ba55G mgfTBACFwW+aZaueBDRR0E9fwsZTQPyKrbBA8Vn4gNqLSy/rVcDgSko9k5yVna87 FYx4y3YTuNt4XVir/am4P7S/wV0nMF8dmFG3oQsBIyiEeeGYHOt0EhZ8C57N2Lko S4cqxEoMW72q7npEN4l82FW3GWNvjfv63CwdUaHBEvyi+P1CLs0iQW5kcmVhcyBI YXVtZXIgPGFuZHJlYXNAeHNzLmNvLmF0PsJaBBMRAgAaBQsHCgMEAxUDAgMWAgEC F4ACGQEFAk7zCnwACgkQxJmyeGcXPhG3lACeNgNJUzVlKr7z9pWspHjI0kPyk84A oJdU6If32T4i3e8Ih97LmJKrXW8JwloEExECABoFCwcKAwQDFQMCAxYCAQIXgAIZ AQUCPCNKhQAKCRDEmbJ4Zxc+ERPPAJ0QqcQaDi0LyD+c6jQoXJ2pJnSTjACdEQQG YMRgbBYxS18JT4PRgnJeQkHNKUFuZHJlYXMgSGF1bWVyIDxhbmRyZWFzLmhhdW1l ckB4c3MuY28uYXQ+wlwEExECABwCGwMECwcDAgMVAgMDFgIBAh4BAheABQJO8wqE AAoJEMSZsnhnFz4RVqIAn0oAGo0QwX64+L3Dzm96aYIoUM5ZAJ447hdOb70cyGzL ZaujlYMoZTQwgMJcBBMRAgAcBQI9x5GvAhsDBAsHAwIDFQIDAxYCAQIeAQIXgAAK CRDEmbJ4Zxc+EYtxAKC6KvgxPdZI7fpXH52fOzTxm3FpVQCfeNfQ2tgyDaia6w8n JhGKYe3bqMrOwE0EPCNKhRAEAJpzPMPHXNhdAeLVnjnPb6jT/rxnlzVy2SBHYqeQ 1NbI5zFyvix5jZmHX4Ivh1ExWF2kbfwfKAuGpdBFmDdeIpRQsFuqwsKfQ+Z4nt91 0WVlLZZAZVkXjrfHPdIRTzuRpGRRa245a5KBHHzlRdZOdSqyzvV7dvIgBfQ0nun1 I4WHAAMHA/9tBLOmaq56g/8hRrsaSbIFtlsjP3Vz19pkoTk56OFAL5sTJzMzdpkZ pgZ+1mAoAKYTSKkieNpvyIC6Q5EgLr75elNh9x/5nAeeKTL3M3/3/cKmzJLO2gf+ l+kQeRQhqmEfpoalvoZ6wIZQ9YzE8yjiGEWwADOTlScsYZbQrWm8G8JGBBgRAgAG BQI8I0qFAAoJEMSZsnhnFz4Re4UAn0Mb0iXR8AXMYEplwMHiCs5q/t7uAJoD85SF 7mFeC+MGcSFjmswHWyPsPA==
    =vrEn
    -----END PGP PUBLIC KEY BLOCK-----

    --------------ss8sKpxrraoOoRVN0h60BwI2--

    --------------ll40pbatUu8gCsbFZ8IOh8D0--

    -----BEGIN PGP SIGNATURE-----

    wmMEABEIACMWIQQRCU0yncVSN0fsMz/EmbJ4Zxc+EQUCZ/kKWQUDAAAAAAAKCRDEmbJ4Zxc+EYoY AJ0RFmZ4RFW7afqG7Ezoxm20ah+M/ACguozV4kjfkp9JtyMYZlhN9PCLwfc=
    =vbE8
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From john doe@21:1/5 to Andreas Haumer on Fri Apr 11 20:50:01 2025
    On 4/11/25 14:26, Andreas Haumer wrote:

    So, finally, my question: Did anyone on this list manage to
    use virt-manager to connect to a VM console using SSH with 2FA?


    The Libvirt mailing list comes to mind! ;^)

    --
    John Doe

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Haumer@21:1/5 to All on Fri Apr 11 21:10:01 2025
    Hi!

    Am 11.04.25 um 20:47 schrieb john doe:
    On 4/11/25 14:26, Andreas Haumer wrote:

    So, finally, my question: Did anyone on this list manage to
    use virt-manager to connect to a VM console using SSH with 2FA?


    The Libvirt mailing list comes to mind! ;^)


    Good point! :-))

    I actually first tried to find a ML for the virt-manager package,
    but it seems that they stopped using their ML in October 2023.
    So I turned to debian-user...

    I should have thought of libvirt in the first place.

    Thanks for pointing me to the libvirt project!

    - andreas

    --
    Andreas Haumer
    *x Software + Systeme | mailto:andreas@xss.co.at
    Karmarschgasse 51/2/20 | https://www.xss.co.at/
    A-1100 Vienna, Austria | Tel: +43-1-6060114

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)