We've long had root logins disabled on clearlinux, but we've
inadvertently left SSHD to allow root login with certificates/keys for a
while. This will be disabled in the future as well and all root logins,
certificate or password based authentication or not, will be refused by
default in ClearLinux by sshd.
If you are using SSH keys to log in as root to ClearLinux machines, I
suggest you stop doing so and instead rely on unprivileged accounts (and
use sudo), even if you are using keys. If you had installed and used
keys yourself, you may lose that access in future updates.
For most ClearLinux systems, the change has no impact, since ClearLinux
does not ship keys nor do I suspect anyone is using keys to log in as
root. If you are however using this feature for automation, you can use
an sshd_config option (`PermitRootLogin prohibit-password`) to allow
this in again.
Signed-off-by: Simental Magana, Marcos <marcos.simental.magana(a)intel.com>
Documentation mentions to check $ man swupd for more information about
swupd, but we don't ship man pages.
This commit adds the documentation package to include man pages
in the os-core-update bundle.
bundles/os-core-update | 1 +
1 file changed, 1 insertion(+)
diff --git a/bundles/os-core-update b/bundles/os-core-update
index 3285611..b491c3f 100644
@@ -15,6 +15,7 @@ gzip-bin
I have a use case where we want to run a *System Container* which resembles
a full blown OS. I found that LXC is the perfect fit for this. I tried to
use the rootfs from a LXC container to run under cc-oci-runtime however I
found that cc-oci-runtime starts its own init process (hyperstart) instead
of systemd. Is it possible to use systemd with clear containers?