[opensuse-arm] Notice for Tumbleweed users - root access from ssh is disabled by default
Hi, In Tumbleweed, latest openSSH update disables root login by default. So, if you have only 'root' user on your headless system, please run the following command on your system, before running a 'zypper dup': echo -e "\n# Allow root login on ssh\nPermitRootLogin yes" >> /etc/ssh/sshd_config Otherwise, you will not be able to login to your system anymore. If it is too late, please use a local connection (serial or keyboard/screen, if not headless), or edit the /etc/ssh/sshd_config file on your SD card from another computer. Cheers, Guillaume -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
Am 03.12.2018 um 09:55 schrieb Guillaume GARDET <guillaume.gardet@free.fr>:
Hi,
In Tumbleweed, latest openSSH update disables root login by default. So, if you have only 'root' user on your headless system, please run the following command on your system, before running a 'zypper dup':
echo -e "\n# Allow root login on ssh\nPermitRootLogin yes" >> /etc/ssh/sshd_config
Otherwise, you will not be able to login to your system anymore.
If it is too late, please use a local connection (serial or keyboard/screen, if not headless), or edit the /etc/ssh/sshd_config file on your SD card from another computer.
Ugh, that explains a few things I've seen. Cases where that breaks: 1) Installer You can set up the installer with ssh installation. That spawns sshd in the instsys, so you can install a system headlessly. But only the root user exists, so you can not log in anymore. 2) The same applies to the dvd rescue system. 3) JeOS Our images define a root user only by default, so you can not install JeOS images headlessly anymore Alex -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
----- Alexander Graf <agraf@suse.de> a écrit :
Am 03.12.2018 um 09:55 schrieb Guillaume GARDET <guillaume.gardet@free.fr>:
Hi,
In Tumbleweed, latest openSSH update disables root login by default. So, if you have only 'root' user on your headless system, please run the following command on your system, before running a 'zypper dup':
echo -e "\n# Allow root login on ssh\nPermitRootLogin yes" >> /etc/ssh/sshd_config
Otherwise, you will not be able to login to your system anymore.
If it is too late, please use a local connection (serial or keyboard/screen, if not headless), or edit the /etc/ssh/sshd_config file on your SD card from another computer.
Ugh, that explains a few things I've seen. Cases where that breaks:
1) Installer
You can set up the installer with ssh installation. That spawns sshd in the instsys, so you can install a system headlessly. But only the root user exists, so you can not log in anymore.
I guess all arches are affected. Could you fill a bug for this one, please?
2) The same applies to the dvd rescue system.
Should be probably handled with previous bug.
3) JeOS
Our images define a root user only by default, so you can not install JeOS images headlessly anymore
The SR is already pending: https://build.opensuse.org/request/show/653518 Guillaume
Alex
-- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
On 03.12.18 10:38, Guillaume GARDET wrote:
----- Alexander Graf <agraf@suse.de> a écrit :
Am 03.12.2018 um 09:55 schrieb Guillaume GARDET <guillaume.gardet@free.fr>:
Hi,
In Tumbleweed, latest openSSH update disables root login by default. So, if you have only 'root' user on your headless system, please run the following command on your system, before running a 'zypper dup':
echo -e "\n# Allow root login on ssh\nPermitRootLogin yes" >> /etc/ssh/sshd_config
Otherwise, you will not be able to login to your system anymore.
If it is too late, please use a local connection (serial or keyboard/screen, if not headless), or edit the /etc/ssh/sshd_config file on your SD card from another computer.
Ugh, that explains a few things I've seen. Cases where that breaks:
1) Installer
You can set up the installer with ssh installation. That spawns sshd in the instsys, so you can install a system headlessly. But only the root user exists, so you can not log in anymore.
I guess all arches are affected. Could you fill a bug for this one, please?
https://bugzilla.suse.com/show_bug.cgi?id=1118114 Alex -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
participants (2)
-
Alexander Graf -
Guillaume GARDET