Implement ssh bootstrapper

bootstrapper/ssh/Dockerfile

@@ -0,0 +1,11 @@
+FROM smallstep/step-cli:0.15.3
+
+USER root
+ENV USER_KEY="/var/run/autocert.step.sm/ssh_user_key"
+ENV USER_CA="/var/run/autocert.step.sm/ssh_user_ca.pub"
+ENV HOST_KEY="/var/run/autocert.step.sm/ssh_host_key"
+ENV HOST_CA="/var/run/autocert.step.sm/ssh_host_ca.pub"
+
+COPY bootstrapper/ssh/bootstrapper.sh /home/step/
+RUN chmod +x /home/step/bootstrapper.sh
+CMD ["/home/step/bootstrapper.sh"]

bootstrapper/ssh/bootstrapper.sh

@@ -0,0 +1,23 @@
+#!/bin/sh
+
+set -e
+
+# Download the root certificate and set permissions
+if [ "$STEP_HOST" == "" ];
+then
+    KEY=$USER_KEY
+else
+    KEY=$HOST_KEY
+fi
+
+step ca bootstrap -f
+
+step ssh certificate $KEY_ID $KEY --insecure --no-password -f
+chmod 644 $KEY $KEY.pub $KEY-cert.pub
+
+unset STEP_TOKEN
+unset STEP_HOST
+
+STEP_HOST=false step ssh config --roots > $USER_CA
+STEP_HOST=true step ssh config --roots > $HOST_CA
+chmod 644 $USER_CA $HOST_CA