configuring key-only ssh access

[tuxbass 0]

What's the _unraid way_ of turning on key-only login access to unraid host?

Can see there are some set of keys in /boot/config/ssh but there's no sshd_config found under /boot to enforce their usage. Why are there keys under boot/config/ssh to begin with if they're not used?

 

Just to be clear, the goal is to secure ssh access so no bad actor on LAN can wreak havoc.

[Darksurf 9]

Unraid needs a method to configure SSH without needing the old SSH plugin. I also want to see 2FA in SSH.

 

 

[tuxbass 0]

On 9/29/2020 at 7:28 PM, Darksurf said:

Unraid needs a method to configure SSH without needing the old SSH plugin. I also want to see 2FA in SSH.

Have you configured unraid SSH with key-only? If so, could you walk me through?
 

[Darksurf 9]

On 10/2/2020 at 2:58 AM, tuxbass said:

Have you configured unraid SSH with key-only? If so, could you walk me through?
 

It should be just like any other SSH config setup. /root/.ssh is a soft link to /boot/config/ssh/root/ .

So inside /boot/config/ssh/root/ , create authorized_keys file via "touch authorized_keys".  Then you can copy and paste your info from you local machine's .ssh/id_rsa.pub key file. Remember to use the PUBLIC key file, not the private.