rootgate

Manage SSH authorized_keys across a fleet of servers — from your terminal.

rootgate is a fast terminal UI (Rust + ratatui) that treats fleet access as a desired-state matrix of server × user × key. Scan every server for the keys present on each account, then add or remove specific keys with instant apply.

Typical uses: grant a key to 3 of 40 servers, give someone access to all-but-one, purge a departed colleague's key everywhere, then remove their account and home directory.

What it does
  • Discovers the accounts on each server and reads their authorized_keys — no login-probing, no private keys required
  • Shows, per user, whether the active key from your keyring is present; one keypress toggles it, applied at once
  • Tabs group servers into named sets, each with its own default login user, sudo on/off, and per-server overrides
  • Creates and deletes accounts across a server or the whole tab, with guards that refuse rather than risk the wrong directory
  • Homes view measures every account's home directory and flags /home directories no account claims
  • Reboots one server or every active one, with reboot-required counts in the confirmation
  • Filter narrows the matrix as you type — hostname, IP, comment, or any account on the machine
How it works

Shells out to the system ssh with connection multiplexing, so repeated actions to a host reuse one connection. It reuses your ssh-agent, ~/.ssh/config and known_hosts, and works entirely over the actual authorized_keys files via sudo or root.

Install

Debian / Ubuntu only — for now.

curl -fsSL https://4apps.lv/apps/rootgate/install.sh | bash
Download