Skip to content

Update documentation on bastion ssh configs to use the proxycommand values #965

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 12 commits into
base: master
Choose a base branch
from
Open
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
leave stanley as the default user
  • Loading branch information
cognifloyd committed Sep 11, 2021
commit 416bd7edebd77d1481b0428d9a0c3f4514a4bffe
13 changes: 7 additions & 6 deletions docs/source/troubleshooting/ssh.rst
Original file line number Diff line number Diff line change
Expand Up @@ -85,16 +85,17 @@ runner boxes, and add the following configuration lines in ``/etc/st2/st2.conf``

[ssh_runner]
use_ssh_config = True
ssh_config_file_path = /root/.ssh/config
ssh_config_file_path = /home/stanley/.ssh/config

Make sure your ssh config is in the same account as user running the st2action process. If root is running
st2actions install it there. Make sure the config and identity files have proper permissions and ownership.
Make sure your ssh config is in the same account as user running the st2actionrunner process. If root is running
st2actionrunner install it under ``/root/.ssh``. Wherever it is installed, make sure the config and identity files
have proper permissions and ownership, or ``ssh`` will refuse to read them.

.. code-block:: bash

chown -R root:root /root/.ssh/*
chmod 600 /root/.ssh/config
chmod 600 /root/.ssh/id_rsa
chown -R stanley:stanley /home/stanley/.ssh/*
chmod 600 /home/stanley/.ssh/config
chmod 600 /home/stanley/.ssh/id_rsa

If you are looking to do ssh bastion forwarding, while allowing SSH to resolve automatically the correct keys based on hostname (eg. to dynamically support environments where a ssh hosts are set in your ssh_config file):

Expand Down
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy