[GH-ISSUE #302] clear password accesses loss after bastion install. #75

New issue

Closed

opened 2026-05-07 00:18:26 +02:00 by BreizhHardware · 1 comment

BreizhHardware commented

2026-05-07 00:18:26 +02:00

Owner

Originally created by @shrom59 on GitHub (Apr 27, 2022).
Original GitHub issue: https://github.com/ovh/the-bastion/issues/302

Hello,

I detected a thing that can be updated in the docs I guess.
When a server is installed with a clear password installation, the root access is unavailable after the bastion installation (because the ssh config is hardened).

I think its possible to :

Adjust the documention (maybe in the FAQ) ? the idea is just to warn customer that after the bastion installation, this access wil be shut.
Add an informaton during the installation to (at least) warn customer about this or even ensure that the SSH access to the bastion (root access) through the bastion is still possible. This way we can ensure that after the bastion installation this is still possible to administrate the bastion through Bastion.

Originally created by @shrom59 on GitHub (Apr 27, 2022). Original GitHub issue: https://github.com/ovh/the-bastion/issues/302 Hello, I detected a thing that can be updated in the docs I guess. When a server is installed with a clear password installation, the root access is unavailable after the bastion installation (because the ssh config is hardened). I think its possible to : - Adjust the documention (maybe in the FAQ) ? the idea is just to warn customer that after the bastion installation, this access wil be shut. - Add an informaton during the installation to (at least) warn customer about this or even ensure that the SSH access to the bastion (root access) through the bastion is still possible. This way we can ensure that after the bastion installation this is still possible to administrate the bastion through Bastion.

BreizhHardware closed this issue

2026-05-07 00:18:26 +02:00

BreizhHardware commented

2026-05-07 00:18:27 +02:00

Author

Owner

@speed47 commented on GitHub (May 5, 2022):

Added a note in the install instructions: https://ovh.github.io/the-bastion/installation/basic.html#connect-to-your-server-as-root

I'll probably add another section for guidance as to good practices around "handling root access to the bastion cluster itself", there are several possibilities, depending on the user's environment / security preferences, and as such, probably requires its own section

@speed47 commented on GitHub (May 5, 2022): Added a note in the install instructions: https://ovh.github.io/the-bastion/installation/basic.html#connect-to-your-server-as-root I'll probably add another section for guidance as to good practices around "handling root access to the bastion cluster itself", there are several possibilities, depending on the user's environment / security preferences, and as such, probably requires its own section

BreizhHardware referenced this issue

2026-05-07 00:19:50 +02:00

[PR #75] [MERGED] fix: interactive mode: mark non-printable chars as such to avoid read… #214