Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Any providers or customers using OnApp?

MannDudeMannDude Patron Provider, Veteran

I just need someone to confirm that by default, OnApp puts the ssh key of it's hostnode in the root user's authorized_keys file.

I Googled and couldn't find it, but this is the explanation given to me by one of the hosts I'm testing out as part of a big write-up and comparison of privacy hosts.

cat ~/.ssh/authorized_keys shows a key belonging to [email protected]

Obviously that seems suspicious considering I'm unaware of any other platform that requires that to 'make changes to your vps from the hypervisor' but what do I know? Maybe OnApp is just wonky like that. ¯\_(ヅ)_/¯

Thanked by 2ChrisMiller DediRock

Comments

  • andrewnandrewn Member
    edited January 2022

    Yes, that is correct although this behaviour can be changed as I remember. For us this is quite useful as we can SSH in from our gateway servers easily to manage the servers.

    Thanked by 2MannDude DediRock
  • Pointless Bump

    Thanked by 1MannDude
  • FractionFrankFractionFrank Member, Host Rep

    I belive the owner of the virtual machine (e.g the onapp user that created it) also has their SSH key installed/added onto the virtual machine when it's created. I guess ideally each VM would be created under a different user and only that SSH to remain to allow for OnAPP functionality.

    Thanked by 2MannDude DediRock
  • Mr_TomMr_Tom Member, Host Rep

    I have heard similar things though from another UK provider who is migrating to OnApp since becoming part of iomart - I can't remember the exact details as it was discussed on IRC a few months ago but it was definitely adding additional keys.

    Thanked by 1DediRock
  • DediRockDediRock Member, Patron Provider

    I'm also curious about this

  • Reminds me of how Kimsufi, SYS, and OVH all do the same thing to their dedicated servers as well.

Sign In or Register to comment.