2016-10-18 22:21:07 +00:00
|
|
|
==============
|
|
|
|
|
openssh-server
|
|
|
|
|
==============
|
|
|
|
|
This element ensures that openssh server is installed and enabled during boot.
|
|
|
|
|
|
2019-04-19 00:57:10 +00:00
|
|
|
To disable hardening of sshd configuration, you have to set
|
|
|
|
|
``DIB_OPENSSH_SERVER_HARDENING`` to 0. This option will configure KexAlgorithms,
|
|
|
|
|
Ciphers and MAC following good pratices on
|
|
|
|
|
https://infosec.mozilla.org/guidelines/openssh
|
2016-10-18 22:21:07 +00:00
|
|
|
|
|
|
|
|
Note
|
|
|
|
|
----
|
|
|
|
|
Most cloud images come with the openssh server service installed and enabled
|
|
|
|
|
during boot. However, certain cloud images, especially those created by the
|
|
|
|
|
\*-minimal elements may not have it installed or enabled. In these cases,
|
|
|
|
|
using this element may be helpful to ensure your image will accessible via SSH.
|
|
|
|
|
It's usually helpful to combine this element with others such as the
|
|
|
|
|
`runtime-ssh-host-keys`.
|
