3 ms·
I've got no "sudo" command on my main Linux workstation: the only way to log in as root is by using a Yubikey, from another computer, which is on a private LAN
by TacticalCoder 2y ago
I've got no "sudo" command on my main Linux workstation: the only way to log in as root is by using a Yubikey, from another computer, which is on a private LAN only shared between my workstation and my "terminal" (an old laptop which I know only use as some kind of remote console/terminal to log in as root on my workstation). So on my workstation I allow ssh root login, but only using keys (no password) (and only on that private LAN). Getting in as root without the Yubikey means finding a remote exploit in sshd.
And in all my containers: no sudo command installed either.
As you may have guessed I'm not a big fan of sudo.
- mixmastamyk 2y agoIs installing sudo in a container common? Don’t think I’ve ever seen that.
- greggyb 2y agoAny reason not to run SSH on localhost only? This way there would be no network requirement whatsoever. I am not trying to criticize, but am just curious what you gain by having this access split across two machines?
- kccqzy 2y agoA long time ago I also wasn't a fan of sudo so I used SSH only (password authentication from localhost). Eventually I stopped caring and stopped having strong opinions about sudo anymore.