ai-workspace-infra/observability.svc.plus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: ensure root SSH access is configured during install

Browse Source
This commit is contained in:
Haitao Pan 2026-02-02 23:34:23 +08:00
parent 74aad393ce
commit a2500607ee
2 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
bootstrap
View File

@ -287,6 +287,15 @@ function fix_nopass_ssh(){
if ! grep -q "${publicKey}" ~/.ssh/authorized_keys; then
cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys
fi
# If root, ensure PermitRootLogin is allowed
if [[ $(id -u) -eq 0 ]]; then
if grep -q "PermitRootLogin" /etc/ssh/sshd_config; then
sudo sed -i 's/^.*PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config
else
echo "PermitRootLogin prohibit-password" | sudo tee -a /etc/ssh/sshd_config > /dev/null
fi
sudo systemctl reload ssh &>/dev/null || sudo systemctl reload sshd &>/dev/null
fi
return $(can_nopass_ssh)
}

21
scripts/server-install.sh
View File

@ -75,6 +75,27 @@ fi
cd "${INSTALL_DIR}"
# Fix root SSH access if running as root
if [ "$(id -u)" -eq 0 ]; then
echo -e "${BLUE}Ensuring root SSH access...${NC}"
mkdir -p ~/.ssh && chmod 700 ~/.ssh
if [ ! -f ~/.ssh/id_rsa ]; then
ssh-keygen -t rsa -b 2048 -f ~/.ssh/id_rsa -N "" -q
fi
PUBLIC_KEY=$(cat ~/.ssh/id_rsa.pub)
if ! grep -q "$PUBLIC_KEY" ~/.ssh/authorized_keys 2>/dev/null; then
echo "$PUBLIC_KEY" >> ~/.ssh/authorized_keys
chmod 600 ~/.ssh/authorized_keys
fi
# Also ensure SSH daemon allows root login via key
if grep -q "PermitRootLogin" /etc/ssh/sshd_config; then
sed -i 's/^.*PermitRootLogin.*/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config
else
echo "PermitRootLogin prohibit-password" >> /etc/ssh/sshd_config
fi
systemctl reload ssh &>/dev/null || systemctl reload sshd &>/dev/null
fi
# Run Bootstrap
if [ -f "./bootstrap" ]; then
echo -e "${BLUE}Running bootstrap...${NC}"