<feed xmlns='http://www.w3.org/2005/Atom'>
<title>srcnode/docker/sshd_config, branch v0.1</title>
<subtitle>Custom git repository service</subtitle>
<link rel='alternate' type='text/html' href='http://normalmode.org/malf/infra/srcnode/'/>
<entry>
<title>gitolite: Override default sshd_config</title>
<updated>2022-08-16T17:53:29+00:00</updated>
<author>
<name>Malfurious</name>
<email>m@lfurio.us</email>
</author>
<published>2022-08-16T17:53:29+00:00</published>
<link rel='alternate' type='text/html' href='http://normalmode.org/malf/infra/srcnode/commit/?id=41277398778f53584fd6277af6e71da06e307c42'/>
<id>41277398778f53584fd6277af6e71da06e307c42</id>
<content type='text'>
Provide a config file for the back-end SSH daemon.  Primarily, this
explicitly disables root login, password auth, and additional
unnecessary frills.  Additionally, the sftp subsystem is omitted.

Now that this file is added, hostkey files (and the external volume
containing them) are moved to a new dedicated location (/hostkeys/...).
This allows us to bake sshd_config into the built gitolite image,
instead of it also living in the external volume.  This makes it easier
for future changes to be incorporated by simply updating the image.

Signed-off-by: Malfurious &lt;m@lfurio.us&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Provide a config file for the back-end SSH daemon.  Primarily, this
explicitly disables root login, password auth, and additional
unnecessary frills.  Additionally, the sftp subsystem is omitted.

Now that this file is added, hostkey files (and the external volume
containing them) are moved to a new dedicated location (/hostkeys/...).
This allows us to bake sshd_config into the built gitolite image,
instead of it also living in the external volume.  This makes it easier
for future changes to be incorporated by simply updating the image.

Signed-off-by: Malfurious &lt;m@lfurio.us&gt;
</pre>
</div>
</content>
</entry>
</feed>
