tink/init-debian
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
darkclip 2026-01-03 07:05:36 +08:00
parent 284f228d10
commit 6bb27c98a0
Signed by: hl
GPG Key ID: A948B2AA5A5D3BDB
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
configure.sh
View File

@ -17,16 +17,18 @@ APT::Install-Suggests "0";" | tee /etc/apt/apt.conf.d/01norecommend >/dev/null
cp "$AWD/assets/ssh-ca.pub" /etc/ssh
cp "$AWD/assets/ssh-krl" /etc/ssh
sed -i "s/.*PermitRootLogin.*/PermitRootLogin prohibit-password/g" /etc/ssh/sshd_config || true
sed -i "s/.*TrustedUserCAKeys.*/TrustedUserCAKeys /etc/ssh/ssh-ca.pub/g" /etc/ssh/sshd_config || true
sed -i "s/.*RevokedKeys.*/RevokedKeys /etc/ssh/ssh-krl/g" /etc/ssh/sshd_config || true
sed -i "/.*TrustedUserCAKeys.*/d" /etc/ssh/sshd_config || true
sed -i "/.*RevokedKeys.*/d" /etc/ssh/sshd_config || true
echo "TrustedUserCAKeys /etc/ssh/ssh-ca.pub" | tee -a /etc/ssh/sshd_config >/dev/null || true
echo "RevokedKeys /etc/ssh/ssh-krl" | tee -a /etc/ssh/sshd_config >/dev/null || true
sed -i "s/.*Host \*.*/Host \*/g" /etc/ssh/ssh_config
sed -i "/.*HashKnownHosts.*/d" /etc/ssh/ssh_config
sed -i "/.*HostKeyAlgorithms.*/d" /etc/ssh/ssh_config
sed -i "/.*PubkeyAcceptedKeyTypes.*/d" /etc/ssh/ssh_config
sed -i "/.*PubkeyAcceptedAlgorithms.*/d" /etc/ssh/ssh_config
sed -i "/.*IdentityFile.*/d" /etc/ssh/ssh_config
echo " HashKnownHosts no" | tee -a /etc/ssh/ssh_config >/dev/null
echo " HostKeyAlgorithms ssh-ed25519,ssh-rsa,rsa-sha2-256" | tee -a /etc/ssh/ssh_config >/dev/null
echo " PubkeyAcceptedKeyTypes ssh-ed25519,ssh-rsa,rsa-sha2-256" | tee -a /etc/ssh/ssh_config >/dev/null
echo " HostKeyAlgorithms +ssh-rsa,rsa-sha2-256" | tee -a /etc/ssh/ssh_config >/dev/null
echo " PubkeyAcceptedAlgorithms +ssh-rsa,rsa-sha2-256" | tee -a /etc/ssh/ssh_config >/dev/null
echo " IdentityFile ~/.ssh/id_ed25519" | tee -a /etc/ssh/ssh_config >/dev/null
echo " IdentityFile ~/.ssh/id_rsa" | tee -a /etc/ssh/ssh_config >/dev/null