Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. Weโ€™ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

is Interactive sudo is enabled! Using a sudo password is less secure than correctly configured SSH keys. warranted in my case ? #299

Open
teto opened this issue Nov 9, 2024 · 1 comment

Comments

@teto
Copy link

teto commented Nov 9, 2024

So when I use deploy-rs, I get the following warning:

๐Ÿš€ โ„น๏ธ [deploy] [INFO] Evaluating flake in .
๐Ÿš€ โš ๏ธ [deploy] [WARN] Interactive sudo is enabled! Using a sudo password is less secure than correctly configured SSH keys.
Please use keys in production environments.
๐Ÿš€ โ„น๏ธ [deploy] [INFO] You will now be prompted for the sudo password for redacted.com.

I do use ssh keys to authenticate to the server with a plain user. I have root ssh access disabled for security reasons. And I dont want my plain user to run passwordless sudo commands so I need the password to run the nixos-rebuild switch.
I feel the warning is targeted at users using password-based ssh ? which is not my case but I still get the warning.
Also the password is asked right at the start of deploy-rs, I would prefer for it to be asked last second, right before doing the switch to avoid the process holding onto it.

@amalgame21
Copy link

Ya I think sudo password, ssh key passphrase and ssh password authentication are different things. I don't know why I use ssh key with passphrase and sudo password with normal user, still get this warning message.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants