Simulate tech port unlock

Cargo.toml

@@ -439,6 +439,7 @@ dns-service-client = { path = "clients/dns-service-client" }
 dpd-client = { git = "https://github.com/oxidecomputer/dendrite", rev = "b3cdd095437f388069aa57be5efac4b4fadc7b4f" }
 dropshot = { version = "0.16.3", features = [ "usdt-probes" ] }
 dyn-clone = "1.0.20"
+ecdsa = { version = "0.16.9", features = ["pem", "signing", "std", "verifying"] }
 either = "1.15.0"
 ereport-types = { path = "ereport/types" }
 expectorate = "1.2.0"
@@ -685,7 +686,7 @@ semver = { version = "1.0.26", features = ["std", "serde"] }
 serde = { version = "1.0", default-features = false, features = [ "derive", "rc" ] }
 serde_cbor = "0.11.2"
 serde_human_bytes = { git = "https://github.com/oxidecomputer/serde_human_bytes", branch = "main" }
-serde_json = "1.0.142"
+serde_json = "1.0.143"
 serde_tokenstream = "0.2"
 serde_urlencoded = "0.7.1"
 serde_with = { version = "3.14.0", default-features = false, features = ["alloc", "macros"] }
@@ -726,6 +727,7 @@ sp-sim = { path = "sp-sim" }
 sprockets-tls = { git = "https://github.com/oxidecomputer/sprockets.git", rev = "6d31fa63217c6a51061dc4afa1ebe175a0021981" }
 sqlformat = "0.3.5"
 sqlparser = { version = "0.45.0", features = [ "visitor" ] }
+ssh-key = "0.6.7"
 static_assertions = "1.1.0"
 # Please do not change the Steno version to a Git dependency.  It makes it
 # harder than expected to make breaking changes (even if you specify a specific

sp-sim/Cargo.toml

@@ -12,6 +12,7 @@ anyhow.workspace = true
 async-trait.workspace = true
 clap.workspace = true
 dropshot.workspace = true
+ecdsa.workspace = true
 futures.workspace = true
 gateway-ereport-messages.workspace = true
 gateway-messages.workspace = true
@@ -21,6 +22,9 @@ hubtools.workspace = true
 nexus-types.workspace = true
 omicron-common.workspace = true
 oxide-tokio-rt.workspace = true
+p256.workspace = true
+rand.workspace = true
+ssh-key.workspace = true
 serde.workspace = true
 serde_cbor.workspace = true
 sha2.workspace = true

sp-sim/examples/config.toml

@@ -6,6 +6,7 @@
 serial_number = "SimSidecar0"
 manufacturing_root_cert_seed = "01de01de01de01de01de01de01de01de01de01de01de01de01de01de01de01de"
 device_id_cert_seed = "01de000000000000000000000000000000000000000000000000000000000000"
+authorized_keys = "../smf/switch_zone_setup/support_authorized_keys"
 
 [[simulated_sps.sidecar.network_config]]
 [simulated_sps.sidecar.network_config.simulated]

sp-sim/src/config.rs

@@ -143,6 +143,7 @@ pub struct SpComponentConfig {
 pub struct SidecarConfig {
     #[serde(flatten)]
     pub common: SpCommonConfig,
+    pub authorized_keys: Option<PathBuf>,
 }
 
 /// Configuration of a simulated gimlet SP