system-reinstall-bootc: Rework user authorized_key selection

[ckyrouac]

Currently, system-reinstall-bootc will display a user selection screen. Upon selecting a non-root user, there is an error message that non-root users is not supported. I think instead we should do one of these things:

• Only look for root's authorized_keys
  • if found, ask the user if they want to add them to the target bootc system
  • if not found or if no to previous, prompt the user if they are OK with no authorized_keys on the target bootc system. With a warning that the system may become inaccessible.
• Look for all user's authorized_keys
  • if found, prompt the user with a user selection screen. Explain that the selected user's authorized_keys will be added to the target bootc system's root user
  • if not found, same prompt as above

An example use case:

• Interactively install a Fedora image via anaconda, creating a user.
• Add an authorized_key for the created user
• run system-reinstall-bootc
• error out with

$ sudo system-reinstall-bootc quay.io/fedora/fedora-bootc:41
Found only one user (chris) with 1 SSH authorized keys. Would you like to instalFound only one user (chris) with 1 SSH authorized keys. Would you like to install this user in the system? yes
ERROR Only importing the root user keys is supported for now

• Next step is not clear. Now the user needs to copy the user's authorized_keys to root? Or don't copy the authorized_key over, complete the reinstall, end up with an inaccessible system.

[ckyrouac]

@omertuc thoughts on this?

[omertuc]

Ideally we should just solve BIFROST-637, no?

But maybe just bring in console-rs/dialoguer#319 which probably won't get merged any time soon and block users from selecting?

But I'm also fine with asking the user if they want to bring keys from non root users into the target system's root user

[ckyrouac]

Ideally we should just solve BIFROST-637, no?

Is the intention of BIFROST-637 to create additional users on the target system, or copy non-root user authorized_keys into root authorized_keys on the target?

But maybe just bring in console-rs/dialoguer#319 which probably won't get merged any time soon and block users from selecting?

I'm not sure I follow this flow. Do you mean we would show all the users, pre-select root (unable to de-select), and allow other users to be selected? What will happen when selecting other users (copy their keys to root?, somehow create the user on the target? error out?)

But I'm also fine with asking the user if they want to bring keys from non root users into the target system's root user

👍

[cgwalters]

Is the intention of BIFROST-637 to create additional users on the target system, or copy non-root user authorized_keys into root authorized_keys on the target?

I would say for now it's the latter.

[ckyrouac]

fixed via #1146