Fully disable root login for E2E testing instances (#23)

Co-authored-by: Zhiwei Liang <[email protected]>
linode · Dec 14, 2023 · 6354457 · 6354457
1 parent 6835745
commit 6354457
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/hack/harden.yaml.j2 b/hack/harden.yaml.j2
@@ -19,6 +19,13 @@ users:
     ssh_authorized_keys:
       - '{{ ssh_pubkey }}'
 
+write_files:
+  # Root login over SSH isn't fully disabled by disable_root
+  - path: /etc/ssh/sshd_config.d/51-disable-root.conf
+    permissions: "0600"
+    content: |
+      PermitRootLogin no
+
 runcmd:
   - service ssh restart
   - service fail2ban start --enable