mirror of
https://github.com/clearlinux/clear-linux-documentation.git
synced 2026-09-05 13:21:27 +00:00
ihutchin
622b8c0a3e
Content files are moved, renamed, and relabeled to fit into get started, concepts, guides, tutorials, and reference sections. Toc-trees were changed where apropriate and section descriptions were provided. Signed-off-by: ihutchin <ianeta.hutchinson@intel.com>
58 lines
1.4 KiB
ReStructuredText
58 lines
1.4 KiB
ReStructuredText
.. _bdl-openssh-server:
|
|
|
|
openssh-server
|
|
##############
|
|
|
|
This bundle provides the OpenSSH\* package needed to enable a SSH service.
|
|
Remote users require a SSH service to be able to use an encrypted login
|
|
shell. The first time OpenSSH starts, it generates the server SSH keys needed
|
|
for the service.
|
|
|
|
SFTP
|
|
====
|
|
|
|
|CL| *disables* the :abbr:`SFTP (SSH File Transfer Protocol)` subsystem by
|
|
default due to security considerations. To enable the SFTP subsystem, perform
|
|
the following configuration of the :abbr:`SSHD (SSH Daemon)` service file:
|
|
|
|
#. Create a systemd drop-in directory for the SSHD service:
|
|
|
|
.. code-block:: console
|
|
|
|
# mkdir -p /etc/systemd/system/sshd@.service.d
|
|
|
|
#. Create the following file:
|
|
:file:`/etc/systemd/system/sshd@.service.d/sftp.conf`
|
|
|
|
#. Add the OPTIONS environment variable
|
|
|
|
.. code-block:: console
|
|
|
|
[Service]
|
|
Environment="OPTIONS=-o Subsystem=\"sftp /usr/libexec/sftp-server\""
|
|
|
|
#. Reload systemd configuration:
|
|
|
|
.. code-block:: console
|
|
|
|
# systemctl daemon-reload
|
|
|
|
Congratulations! The SFTP subsystem is enabled.
|
|
|
|
Root login
|
|
==========
|
|
|
|
To enable root login via ssh, perform the following steps:
|
|
|
|
#. Create a *ssh* directory in :file:`/etc`, only if it does not exist)
|
|
|
|
.. code-block:: console
|
|
|
|
# mkdir /etc/ssh
|
|
|
|
#. Set the configuration variable.
|
|
|
|
.. code-block:: console
|
|
|
|
# echo "PermitRootLogin yes" >> /etc/ssh/sshd_config
|