3 ms·
Disabling SSH is an interesting tip. I guess the OP doesn't do any automation via SSH.
by michaelmior 13y ago
Disabling SSH is an interesting tip. I guess the OP doesn't do any automation via SSH.
- richadams 13y agoJust disabling inbound SSH connections, the servers can still SSH out to other systems to pull in files, configurations, clone git repos, etc. It's just a way to stop yourself from cheating and SSHing in just to fix that one thing, instead of automating it.
- milkshakes 13y agoexcept that some automation frameworks rely on inbound ssh access to the machines. ansible would be an example of such a framework, in its default configuration at least.
- richadams 13y agoAh, I wasn't aware of that, very good point! The goal of the tip is really to stop users SSHing in just to fix that one little thing, so you could still allow your automation frameworks SSH access and just disable it for users.
- michaelmior 13y agoIt can also be useful to SSH into a system to check what's going on with a specific problem. Sometimes weird things happen that you can't always anticipate or automate away.
- jamiesonbecker 13y agoUserify is awesome for this - disable SSH user accounts at any time and then re-enable when you realize you still need SSH to find out why your instance stopped sending logs!! ;)
- michaelmior 13y agoThanks Userify CEO! :)