Skip to content

Commit 157832e

Browse files
committed
Fix broken SSH host key config in rhel/almalinux 10
Signed-off-by: Jonathan Wright <jonathan@almalinux.org>
1 parent db61a1d commit 157832e

File tree

1 file changed

+26
-0
lines changed

1 file changed

+26
-0
lines changed
Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
---
2+
ssh_pkgs:
3+
- openssh
4+
sshd_path: /usr/sbin/sshd
5+
ssh_host_keys_dir: /etc/ssh
6+
sshd_service_name: sshd
7+
ssh_owner: root
8+
ssh_group: root
9+
ssh_host_keys_owner: root
10+
ssh_host_keys_group: root
11+
ssh_host_keys_mode: "0600"
12+
ssh_selinux_packages:
13+
- policycoreutils-python-utils
14+
- checkpolicy
15+
16+
# true if SSH support Kerberos
17+
ssh_kerberos_support: true
18+
19+
# true if SSH has PAM support
20+
ssh_pam_support: true
21+
22+
sshd_moduli_file: /etc/ssh/moduli
23+
24+
# disable CRYPTO_POLICY to take settings from sshd configuration
25+
# see: https://access.redhat.com/solutions/4410591
26+
sshd_disable_crypto_policy: true

0 commit comments

Comments
 (0)