[Live-demo] OpenSSH

[Hamish]

> Brian wrote:
> > I just did a second hard disk install of the final liveDVD
> > I can confirm that to make ssh login work, I had to remove
> > openssh-server, reboot, then install it

for security reasons the unique system key is not shipped with the disc
image. I suspect the ISO-gen script deletes it.

Create a new one for yourself with ssh-keygen. I've added a FAQ entry
for this on the wiki:

http://wiki.osgeo.org/wiki/Live_GIS_Disc_FAQ


**For security reasons remote login should remain disabled by default.**

Reinstalling the openssh-server package has the effect of re-running
ssh-keygen.


Alex:
> Odd, openssh-server shouldn't be installed to begin with.

it gets installed by bootstrap.sh. If /etc/ssh/ssh_host_[rd]sa_key
exists on the VM binary, they should be deleted and a new distribution
binary issued. As long as those files are missing, remote login should
be denied.

I've just updated setdown.sh in trunk to make sure that these files are
removed in future.


regards,
Hamish