Linode/Setup: Difference between revisions

From neuromatch
(Created page with "Assuming you have made a Linode with Debian 11 == User accounts == * Make user accounts: <syntaxhighlight lang="bash"> adduser \ --system \ --shell /bin/bash \ --gecos 'User Description If u want' \ --group \ --home /home/USERNAME \ USERNAME </syntaxhighlight> * Add user to <code>sudo</code> group (if needed) <syntaxhighlight lang="bash"> usermod -aG sudo USERNAME </syntaxhighlight> == Security == === Install RSA Keys === === Configure s...")
 
Line 23: Line 23:
== Security ==
== Security ==


=== Install RSA Keys ===
=== Add cryptographic public keys for user authentication ===
 
* RSA keys (has known vulnerabilities)
* [https://www.unixtutorial.org/how-to-generate-ed25519-ssh-key/ ed25519 keys] (better alternative: faster, more secure, resilient against hash-function collision attacks, shorter)


=== Configure sshd ===
=== Configure sshd ===

Revision as of 04:56, 21 November 2022

Assuming you have made a Linode with Debian 11

User accounts

  • Make user accounts:
adduser \
   --system \
   --shell /bin/bash \
   --gecos 'User Description If u want' \
   --group \
   --home /home/USERNAME \
   USERNAME
  • Add user to sudo group (if needed)
usermod -aG sudo USERNAME

Security

Add cryptographic public keys for user authentication

  • RSA keys (has known vulnerabilities)
  • ed25519 keys (better alternative: faster, more secure, resilient against hash-function collision attacks, shorter)

Configure sshd

  • Disable password login
  • Disable root login