[Article] [Draft] SSH workflow best practices

Hackerspace
1

https://ef.gy/hardening-ssh#SSH%20certificates

https://c-tek.tumblr.com/post/129804599384/did-ansible-just-hack-me?is_related_post=1

https://www.joyent.com/blog/automatic-dns-updates-with-containerbuddy

https://blather.michaelwlucas.com/archives/1106

https://awesome-docker.netlify.com/

http://www.tldp.org/HOWTO/ppp-ssh/

https://medium.com/@tech_phil/running-ansible-inside-docker-550d3bb2bdff

https://nathanleclaire.com/blog/2015/11/10/using-ansible-with-docker-machine-to-bootstrap-host-nodes/

https://uisapp2.iu.edu/confluence-prd/pages/viewpage.action?pageId=280461906

http://dustwell.com/how-x-over-ssh-really-works.html

https://www.cyberciti.biz/tips/bash-shell-parameter-substitution-2.html

1 Like
2

Oh FYI, this is one of the end goals we should be striving for with computing:

3

Step 1. Purchase SSH Tectia
Step 2. Install and configure
Step 3. Share keys
Step 4. Profit! (I mean collect underpants)

Yes yes i know, precompiled lack of trust expensive blah blah. Bottom line, it works, its repeatable and some very large businesses responsible for insane amounts of money are making good use with no casualties.

4

Step 1. Purchase SSH Tectia

SFTP/SCP cannot do recursion well. Nor does one need to “purchase ssh”.

You want repeatable use ansible:
http://www.mydailytutorials.com/how-to-copy-files-and-directories-in-ansible-using-copy-and-fetch-modules/

Don’t want to use ansible to sync between 1:n^th size clusters then use rsync:

local to remote

rsync -avH /home/localuser/testfile1 -e ssh [email protected]:/home/adam/testfile1

remote to local

rsync -avHe ssh [email protected]:/home/adam/testfile1 /home/localuser/testfile1

https://calomel.org/rsync_tips.html

5

My post was part sarcasm part experience and most definitely one no likely to be implemented :slight_smile:

1 Like
6

ah. well humorist sarcasm never really comes off in text so no worries. :smiley: