void-mklive icon indicating copy to clipboard operation
void-mklive copied to clipboard

sshd service enabled on local-installed system

Open Stidgit opened this issue 2 years ago • 8 comments

Why exactly would this be ON by default? I know the system is reliant on OpenSSH but it being open doesn't contribute to it in any positive way.

Stidgit avatar Sep 14 '23 14:09 Stidgit

I'm unsure if this is a regression in 20230628 but it should probably not be there. I expect this will be fixed by larger refactors planned before the next release

classabbyamp avatar Sep 14 '23 14:09 classabbyamp

https://github.com/void-linux/void-mklive/issues/40 this has always been the case for the live image because there was some opposition to disabling it by default.

Duncaen avatar Sep 14 '23 16:09 Duncaen

this is related to this thread where sshd is running on the installed system too

my thoughts are basically that #333 and adding a service enablement page to the installer will ensure that this will only happen when the user wants it to

classabbyamp avatar Sep 14 '23 16:09 classabbyamp

I continue to oppose disabling ssh in the live image. I do support keeping SSH disabled in installed systems until a user deliberately wants it activated (it's the first thing I enable before rebooting from the installer, on my manual installs).

Vaelatern avatar Sep 14 '23 21:09 Vaelatern

updated title to be more specific about the unexpected behaviour. SSH enablement in the live environment itself was never in question here

classabbyamp avatar Sep 14 '23 21:09 classabbyamp

I continue to oppose disabling ssh in the live image. I do support keeping SSH disabled in installed systems until a user deliberately wants it activated (it's the first thing I enable before rebooting from the installer, on my manual installs).

Abby corrected the title. The question in mind was about SSH being enabled on an installed system, not a live image. My apologies.

Stidgit avatar Sep 15 '23 03:09 Stidgit

We may even allow root login via ssh for the live image, because it is not hidden very far away anyways. I use log via ssh on hosts that have no console.

vincele avatar Mar 31 '24 16:03 vincele

there is no reason to allow root login via ssh

classabbyamp avatar Mar 31 '24 16:03 classabbyamp