From 1d03349c683c33a40f2172b442f2bc9a30d1b64d Mon Sep 17 00:00:00 2001 From: Alex Fornuto <2349184+alexfornuto@users.noreply.github.com> Date: Thu, 9 Jul 2026 15:46:15 -0500 Subject: [PATCH 1/4] Update post-install.md The instructions for disabling SSH password auth were incorrect in a few different ways; there is no `sshd_config` file, `kubectl` isn't in the `root` user's path, etc etc... This is what worked for me, but I reckon someone at SUSE should perform a more holistic review of these pages. Signed-off-by: Alex Fornuto <2349184+alexfornuto@users.noreply.github.com> --- .../version-v1.8/install/post-install.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/versioned_docs/version-v1.8/install/post-install.md b/versioned_docs/version-v1.8/install/post-install.md index d5e98530da..9b649da445 100644 --- a/versioned_docs/version-v1.8/install/post-install.md +++ b/versioned_docs/version-v1.8/install/post-install.md @@ -22,24 +22,24 @@ By default during installation, SSH password authentication is enabled on the Ha Once installation is completed, however, disabling SSH password authentication is recommended. You can run the following command, which uses `kubectl` to apply a [`CloudInit`](https://docs.harvesterhci.io/v1.6/advanced/cloudinitcrd/) configuration, to disable SSH password authentication on all Harvester nodes: ```sh -cat < /etc/ssh/sshd_config.d/99-disable-passwords.conf + - echo "KbdInteractiveAuthentication no" >> /etc/ssh/sshd_config.d/99-disable-passwords.conf + - systemctl restart sshd paused: false EOF ``` From 6c13f86a7466f3fd94e0f762c4f599de3db9a4ec Mon Sep 17 00:00:00 2001 From: Alex Fornuto <2349184+alexfornuto@users.noreply.github.com> Date: Thu, 9 Jul 2026 15:48:32 -0500 Subject: [PATCH 2/4] comment cleanup Signed-off-by: Alex Fornuto <2349184+alexfornuto@users.noreply.github.com> --- versioned_docs/version-v1.8/install/post-install.md | 1 - 1 file changed, 1 deletion(-) diff --git a/versioned_docs/version-v1.8/install/post-install.md b/versioned_docs/version-v1.8/install/post-install.md index 9b649da445..56e1485b7e 100644 --- a/versioned_docs/version-v1.8/install/post-install.md +++ b/versioned_docs/version-v1.8/install/post-install.md @@ -36,7 +36,6 @@ spec: network: - name: "disable password login" commands: - # Drop a native configuration piece straight into the drop-in directory - echo "PasswordAuthentication no" > /etc/ssh/sshd_config.d/99-disable-passwords.conf - echo "KbdInteractiveAuthentication no" >> /etc/ssh/sshd_config.d/99-disable-passwords.conf - systemctl restart sshd From 46a8abcb61091b582090d74b26829d9a9cb28ce4 Mon Sep 17 00:00:00 2001 From: Alex Fornuto <2349184+alexfornuto@users.noreply.github.com> Date: Fri, 17 Jul 2026 12:38:21 -0500 Subject: [PATCH 3/4] Apply review suggestions. Signed-off-by: Alex Fornuto <2349184+alexfornuto@users.noreply.github.com> --- versioned_docs/version-v1.8/install/post-install.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/versioned_docs/version-v1.8/install/post-install.md b/versioned_docs/version-v1.8/install/post-install.md index 56e1485b7e..118c425353 100644 --- a/versioned_docs/version-v1.8/install/post-install.md +++ b/versioned_docs/version-v1.8/install/post-install.md @@ -29,16 +29,16 @@ metadata: name: ssh-config spec: matchSelector: - harvesterhci.io/managed: "true" + harvesterhci.io/managed: "true" # apply to all Harvester nodes filename: 99-ssh-config contents: | stages: network: - - name: "disable password login" - commands: - - echo "PasswordAuthentication no" > /etc/ssh/sshd_config.d/99-disable-passwords.conf - - echo "KbdInteractiveAuthentication no" >> /etc/ssh/sshd_config.d/99-disable-passwords.conf - - systemctl restart sshd + - name: "disable password login" + commands: + - echo "PasswordAuthentication no" > /etc/ssh/sshd_config.d/99-disable-passwords.conf + - echo "KbdInteractiveAuthentication no" >> /etc/ssh/sshd_config.d/99-disable-passwords.conf + - systemctl restart sshd paused: false EOF ``` From 172e199f1e5055540afa610df2a99c96b4d81b7d Mon Sep 17 00:00:00 2001 From: Alex Fornuto <2349184+alexfornuto@users.noreply.github.com> Date: Fri, 17 Jul 2026 12:39:05 -0500 Subject: [PATCH 4/4] squashme Signed-off-by: Alex Fornuto <2349184+alexfornuto@users.noreply.github.com> --- versioned_docs/version-v1.8/install/post-install.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/versioned_docs/version-v1.8/install/post-install.md b/versioned_docs/version-v1.8/install/post-install.md index 118c425353..c0f4c63648 100644 --- a/versioned_docs/version-v1.8/install/post-install.md +++ b/versioned_docs/version-v1.8/install/post-install.md @@ -36,9 +36,9 @@ spec: network: - name: "disable password login" commands: - - echo "PasswordAuthentication no" > /etc/ssh/sshd_config.d/99-disable-passwords.conf - - echo "KbdInteractiveAuthentication no" >> /etc/ssh/sshd_config.d/99-disable-passwords.conf - - systemctl restart sshd + - echo "PasswordAuthentication no" > /etc/ssh/sshd_config.d/99-disable-passwords.conf + - echo "KbdInteractiveAuthentication no" >> /etc/ssh/sshd_config.d/99-disable-passwords.conf + - systemctl restart sshd paused: false EOF ```