clearlinux/clear-linux-documentation
2
0
Fork 0
mirror of https://github.com/clearlinux/clear-linux-documentation.git synced 2026-09-05 05:12:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update instructions for X11 forwarding and SFTP (#1066)

Browse Source 
* Update instructions for X11 forwarding and SFTP, closes #1027

* Clean up instruction steps for consistency
This commit is contained in:
Beth Dean
2020-03-10 11:11:50 -07:00
committed by GitHub
parent 11736014d7
commit 9e94e80ef8
1 changed files with 13 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
source/guides/network/openssh-server.rst
+13 -32
View File
@@ -3,7 +3,7 @@
Enable and configure SSH service
################################
This guide describes how to set up SSH service.
This guide describes how to set up the SSH service.
.. contents::
:local:
@@ -14,7 +14,7 @@ Overview
The :command:`openssh-server` bundle provides the OpenSSH package that
enables an SSH service in |CL-ATTR|. Remote users require an SSH service to be
able to use an encrypted login shell.
able to use an encrypted login shell. The SSH daemon has all of its configuration built in and no template configuration file is present on the file system.
|CL| enables the `sshd.socket` unit, which listens on port 22 by default
and starts the OpenSSH service as required. The first time OpenSSH starts, it
@@ -104,43 +104,26 @@ Enable SFTP
***********
|CL| *disables* the :abbr:`SFTP (SSH File Transfer Protocol)` subsystem by
default due to security considerations. To enable the SFTP subsystem, you must
configure the :abbr:`SSHD (SSH Daemon)` service file.
default due to security considerations. To enable the SFTP subsystem, you can
configure the :file:`/etc/ssh/sshd_config` file.
#. Create a systemd drop-in directory for the SSHD service:
#. Create the following file, if it does not already exist:
:file:`/etc/ssh/sshd_config`
.. code-block:: bash
sudo mkdir -p /etc/systemd/system/sshd@.service.d
#. Create the following file:
:file:`/etc/systemd/system/sshd@.service.d/sftp.conf`
#. Add the OPTIONS environment variable to the :file:`sftp.conf` file.
#. Add the the SFTP subsystem in :file:`/etc/ssh/sshd_config`:
.. code-block:: console
[Service]
Environment="OPTIONS=-o Subsystem=\"sftp /usr/libexec/sftp-server\""
subsystem sftp /usr/libexec/sftp-server
#. Reload systemd configuration:
.. code-block:: bash
sudo systemctl daemon-reload
Congratulations! The SFTP subsystem is enabled.
Congratulations! The SFTP subsystem is enabled. You do not need to restart the sshd service.
Enable root login
*****************
To enable root login via SSH, perform the following steps:
#. Create an *ssh* directory in :file:`/etc`, if it does not already exist.
.. code-block:: bash
mkdir /etc/ssh
#. Create the following file, if it does not already exist:
:file:`/etc/ssh/sshd_config`
@@ -151,6 +134,8 @@ To enable root login via SSH, perform the following steps:
PermitRootLogin yes
You have now enabled root login on your system. You do not need to restart the sshd service.
Enable X11-forwarding
*********************
@@ -159,12 +144,6 @@ clients) over the SSH connection. This enables remote GUI apps without the need
for full VNC or remote desktop setup. To enable X11-forwarding via SSH,
perform the following steps:
#. Create an *ssh* directory in :file:`/etc`, if it does not already exist.
.. code-block:: bash
mkdir /etc/ssh
#. Create the following file, if it does not already exist:
:file:`/etc/ssh/sshd_config`
@@ -176,3 +155,5 @@ perform the following steps:
X11UseLocalhost yes
X11DisplayOffset 10
X11Forwarding yes
You have now enabled X11-forwarding! You do not need to restart the sshd service.