summaryrefslogtreecommitdiffstats
path: root/docs
diff options
context:
space:
mode:
Diffstat (limited to 'docs')
-rw-r--r--docs/configguide/jumpserverinstall.rst27
1 files changed, 21 insertions, 6 deletions
diff --git a/docs/configguide/jumpserverinstall.rst b/docs/configguide/jumpserverinstall.rst
index 19a659a2..e51e9469 100644
--- a/docs/configguide/jumpserverinstall.rst
+++ b/docs/configguide/jumpserverinstall.rst
@@ -28,9 +28,9 @@ may be outdated (please refer to Fuel Installer documents).
``service network restart``
-6. Edit /etc/resolv.conf and add a nameserver
+6. Edit /etc/resolv.conf and add a nameserver, for example 8.8.8.8
- ``vi /etc/resolv.conf``
+ ``echo nameserver 8.8.8.8 >> /etc/resolv.conf``
7. Install libvirt & kvm
@@ -42,13 +42,26 @@ may be outdated (please refer to Fuel Installer documents).
``shutdown -r now``
-9. If you wish to avoid annoying delay when use ssh to log in, disable DNS lookups:
+9. Configure SSHD
- ``vi /etc/ssh/sshd_config``
+ If you wish to avoid annoying delay when use ssh to log in, disable DNS lookups:
- Uncomment "UseDNS yes", change 'yes' to 'no'.
+ When **UseDNS** is existed in the config file, update it:
- Save
+ ``sed -i -e 's/^#*UseDNS\ \+yes/UseDNS no/' /etc/ssh/sshd_config``
+
+ or append the setting when not existed:
+
+ ``echo UseDNS no >> /etc/ssh/ssd_config``
+
+ Disable Password Authenticaion for security:
+
+ ``sed -i -e 's/^#PasswordAuthentication\ \+yes/PasswordAuthentication no/' /etc/ssh/sshd_config``
+
+ If you want to disable IPv6 connections, comment IPv6 ListenAddress and change AddressFamily to inet:
+
+ ``sed -i -e 's/^ListenAddress\ \+::/#ListenAddress ::/' /etc/ssh/sshd_config``
+ ``sed -i -e 's/^AddressFamily\ \+any/AddressFamily inet/' /etc/ssh/sshd_config``
10. Restart sshd
@@ -62,6 +75,8 @@ may be outdated (please refer to Fuel Installer documents).
13. Create a bridge using the interface on the PXE network, for example: br0
+ ``brctl addbr br0``
+
14. Make a directory owned by qemu:
``mkdir /home/qemu; mkdir -p /home/qemu/VMs/fuel-6.0/disk``