Configure ssh port?

[pwFoo]

Is there an easy way to change the sshd listen port / bind ip?

Would be nice to have port 22 available for applications :)

[cmavr8]

It should be possible since November 2015: https://forums.rancher.com/t/change-the-default-sshd-port/859

[pwFoo]

That looks like a workaround. A clean solution is prefered (in the future).

Id wanted to ask if and where the clean solution is available. Thank you

[pwFoo]

Any update here?
Custom sshd port and / or listen ip (internal management interface / ip address) would be nice.

[JasonGiedymin]

Knowing that upon first boot, login is auto until cloud-config is installed, I don't see anything wrong with specifying write_files: for sshd_config. To me the semantics of keeping all the configs in cloud-config is totally acceptable and this message remains consistent.

If you want to change something on the os, start with cloud-config. Currently I have my own settings for network interfaces and sshd sitting in a cloud-config.

Baring implementation opinions, this ticket could be closed because you in fact can change the port with write_files.

[ulm0]

write_files is a clean solution, but I can't pass the cloud-config file when creating instances with docker-machine on GCP.

[JasonGiedymin]

This might be a limitation of the docker-Machine driver as well as google only allowing cloud-init with cos based images (google cloud containerized OS). I recommend setting up a local vpc box that can serve these files. You could get these files remotely from the server being set up. Albeit not automated. Otherwise you could create a custom image with knowledge of said bootstrap server.

…

-Jason

On Dec 9, 2017, at 10:00 AM, Mauricio Ugaz ***@***.***> wrote: write_files is a clean solution, but I can't pass the cloud-config file when creating instances with docker-machine on GCP. — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.

[niusmallnan]

I will support these configurations:

rancher:
  ssh:
    port: 10022
    listen_address: 172.22.100.100

Users can use these in the cloud-config file.

The rancher.ssh.port is only designed for default console, because if users change sshd-config, restart the host will restore the default. The new configuration will not take effect.

For other consoles,
all files are persistent, users can modify sshd-config by themselves.