summaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
authorxengineering <me@xengineering.eu>2024-07-28 13:08:26 +0200
committerxengineering <me@xengineering.eu>2024-07-28 13:08:26 +0200
commit1b78d4af89791791b68b51a72cbcf0775038108d (patch)
treebef8fbffaee0522721264b7df2694e47e8e662e5 /README.md
parente08829ca3870a3a802ac756b9194b1217da30d0f (diff)
downloadcraft-1b78d4af89791791b68b51a72cbcf0775038108d.tar
craft-1b78d4af89791791b68b51a72cbcf0775038108d.tar.zst
craft-1b78d4af89791791b68b51a72cbcf0775038108d.zip
Switch to SSH keys instead of passwords
This is better for automation and security (which of course is only a thing if the default key is not used).
Diffstat (limited to 'README.md')
-rw-r--r--README.md3
1 files changed, 2 insertions, 1 deletions
diff --git a/README.md b/README.md
index 31ec98c..346befd 100644
--- a/README.md
+++ b/README.md
@@ -90,10 +90,10 @@ locale-gen
echo 'LANG=en_US.UTF-8' > /etc/locale.conf
echo 'craft-archlinux' > /etc/hostname
mkinitcpio -P
-echo 'root' | passwd -s
systemctl enable NetworkManager
systemctl enable chronyd
sed -i 's|#PermitRootLogin prohibit-password|PermitRootLogin yes|g' /etc/ssh/sshd_config
+echo 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFB/sCmZZ9lffCfAjbNCHRsW95/s75p5qMp+9Ch4/NPn' > /root/.ssh/authorized_keys
systemctl enable sshd
# bootloader installation
@@ -142,5 +142,6 @@ ssh \
-p 9999 \
-o UserKnownHostsFile=/dev/null \
-o StrictHostKeyChecking=no \
+ -i keys/craft_ed25519 \
root@localhost
```