Bootstrapping servers with chef, and changing the SSH PortCygwin, ssh, and git on Windows Server 2008How to automate SSH login with password?Problems bootstrapping Chef from Rubygems on CentOS5.4Rsync and Webmin won't recognize a change in portsIssue with SSH on Ubuntu - Local connection ok, remote connection - Is it me or my ISP?bootstrapping an ubuntu ec2 instance using chef and knifechef node installation help (bootstrapping)Specifying SSH port with Chef, knife bootstrapKnife can't ssh into newly instantiated EC2 serverSSH hardening with chef test-kitchen. How to tell test-kitchen how to connect?
Oil draining out shortly after turbo hose detached/broke
Quasar Redshifts
In The Incredibles 2, why does Screenslaver's name use a pun on something that doesn't exist in the 1950s pastiche?
What does "lit." mean in boiling point or melting point specification?
Is Jesus the last Prophet?
How can powerful telekinesis avoid violating Newton's 3rd Law?
What exactly "triggers an additional time" in the interaction between Afterlife and Teysa Karlov?
What is the STRONGEST end-of-line knot to use if you want to use a steel-thimble at the end, so that you've got a steel-eyelet at the end of the line?
Dedicated bike GPS computer over smartphone
Mathematica 12 has gotten worse at solving simple equations?
How to represent jealousy in a cute way?
Is it true that "only photographers care about noise"?
Why is my power MOSFET heating up when on?
Prove that the infinite series equals 1
Makefile for a simple Debian Repo
Create a cube from identical 3D objects
Dependent voltage/current sources
Are the guests in Westworld forbidden to tell the hosts that they are robots?
How (un)safe is it to ride barefoot?
Why did Robert pick unworthy men for the White Cloaks?
What is the "books received" section in journals?
What is the theme of analysis?
Why do (or did, until very recently) aircraft transponders wait to be interrogated before broadcasting beacon signals?
My mom's return ticket is 3 days after I-94 expires
Bootstrapping servers with chef, and changing the SSH Port
Cygwin, ssh, and git on Windows Server 2008How to automate SSH login with password?Problems bootstrapping Chef from Rubygems on CentOS5.4Rsync and Webmin won't recognize a change in portsIssue with SSH on Ubuntu - Local connection ok, remote connection - Is it me or my ISP?bootstrapping an ubuntu ec2 instance using chef and knifechef node installation help (bootstrapping)Specifying SSH port with Chef, knife bootstrapKnife can't ssh into newly instantiated EC2 serverSSH hardening with chef test-kitchen. How to tell test-kitchen how to connect?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have a full set of recipes that are working to bootstrap a server at Rackspace, it configures and installs everything as needed. Now, I want to change the default port SSH runs on. This is fairly easy to do, but the question is, how do I tell Knife to use 22 when bootstrapping, but the non standard port when doing everything else on registered nodes?
ssh chef
asked Jul 20 '11 at 19:00
Vid LutherVid Luther
695310
add a comment |
I have a full set of recipes that are working to bootstrap a server at Rackspace, it configures and installs everything as needed. Now, I want to change the default port SSH runs on. This is fairly easy to do, but the question is, how do I tell Knife to use 22 when bootstrapping, but the non standard port when doing everything else on registered nodes?
ssh chef
asked Jul 20 '11 at 19:00
Vid LutherVid Luther
695310
1
talked with the people in #chef on FreeNode and figured it out. When bootstrapping, I need to pass -c myboostrap.config where i have a setting saying knife[:ssh_port] = '22'
– Vid Luther
Jul 20 '11 at 23:46
2
Add an answer and accept it, so others can learn from your experience.
– womble♦
Jul 20 '11 at 23:53
add a comment |
I have a full set of recipes that are working to bootstrap a server at Rackspace, it configures and installs everything as needed. Now, I want to change the default port SSH runs on. This is fairly easy to do, but the question is, how do I tell Knife to use 22 when bootstrapping, but the non standard port when doing everything else on registered nodes?
ssh chef
asked Jul 20 '11 at 19:00
Vid LutherVid Luther
695310
I have a full set of recipes that are working to bootstrap a server at Rackspace, it configures and installs everything as needed. Now, I want to change the default port SSH runs on. This is fairly easy to do, but the question is, how do I tell Knife to use 22 when bootstrapping, but the non standard port when doing everything else on registered nodes?
ssh chef
ssh chef
asked Jul 20 '11 at 19:00
Vid LutherVid Luther
695310
asked Jul 20 '11 at 19:00
Vid LutherVid Luther
695310
asked Jul 20 '11 at 19:00
Vid LutherVid Luther
695310
asked Jul 20 '11 at 19:00
Vid LutherVid Luther
695310
asked Jul 20 '11 at 19:00
Vid LutherVid Luther
695310
695310
1
talked with the people in #chef on FreeNode and figured it out. When bootstrapping, I need to pass -c myboostrap.config where i have a setting saying knife[:ssh_port] = '22'
– Vid Luther
Jul 20 '11 at 23:46
2
Add an answer and accept it, so others can learn from your experience.
– womble♦
Jul 20 '11 at 23:53
add a comment |
1
talked with the people in #chef on FreeNode and figured it out. When bootstrapping, I need to pass -c myboostrap.config where i have a setting saying knife[:ssh_port] = '22'
– Vid Luther
Jul 20 '11 at 23:46
2
Add an answer and accept it, so others can learn from your experience.
– womble♦
Jul 20 '11 at 23:53
1
1
talked with the people in #chef on FreeNode and figured it out. When bootstrapping, I need to pass -c myboostrap.config where i have a setting saying knife[:ssh_port] = '22'
– Vid Luther
Jul 20 '11 at 23:46
talked with the people in #chef on FreeNode and figured it out. When bootstrapping, I need to pass -c myboostrap.config where i have a setting saying knife[:ssh_port] = '22'
– Vid Luther
Jul 20 '11 at 23:46
2
2
Add an answer and accept it, so others can learn from your experience.
– womble♦
Jul 20 '11 at 23:53
Add an answer and accept it, so others can learn from your experience.
– womble♦
Jul 20 '11 at 23:53
add a comment |
1 Answer
1
active
oldest
votes
This has been in chef since version 0.9.16. You can configure the port by adding the following to your .chef/knife.rb.
knife[:ssh_port] = '22'
Change 22 to the port you want. You don't need to pass -c to the knife bootstrap command if your configuration is in .chef/knife.rb in the current directory.
Ticket for this feature.
Commit for the change.
More information on configuring knife can be found on the Chef wiki:
- http://wiki.opscode.com/display/chef/Knife
- http://wiki.opscode.com/display/chef/Knife+Bootstrap
answered Jul 24 '11 at 3:18
jtimbermanjtimberman
6,87823041
jtimberman, I saw the knife[:ssh_port] option, but the issue is I change the port to non 22, AFTER the bootstrap, so in knife.rb, I have the non standard port, but in the bootstrap it's still 22. Since the machine boots up at 22. Or maybe I'm not understanding what you're saying? (more than likely :)). Hope to see you or someone from your team at OSCON later this week.
– Vid Luther
Jul 24 '11 at 15:34
I wouldn't bother with changing the port as setting SSH to run on an alternate port doesn't really increase security. An attacker of any sophistication (or one who wants to find out if you're running vulnerable SSH) is going to scan all the ports available.
– jtimberman
Aug 2 '11 at 4:06
I'm not changing ports for "security" like that, we're running proftpd with mod_sftp on port 22, and on a non standard port which would be needed for chef, and actual ssh only.
– Vid Luther
Aug 3 '11 at 20:03
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f292397%2fbootstrapping-servers-with-chef-and-changing-the-ssh-port%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
This has been in chef since version 0.9.16. You can configure the port by adding the following to your .chef/knife.rb.
knife[:ssh_port] = '22'
Change 22 to the port you want. You don't need to pass -c to the knife bootstrap command if your configuration is in .chef/knife.rb in the current directory.
Ticket for this feature.
Commit for the change.
More information on configuring knife can be found on the Chef wiki:
- http://wiki.opscode.com/display/chef/Knife
- http://wiki.opscode.com/display/chef/Knife+Bootstrap
answered Jul 24 '11 at 3:18
jtimbermanjtimberman
6,87823041
jtimberman, I saw the knife[:ssh_port] option, but the issue is I change the port to non 22, AFTER the bootstrap, so in knife.rb, I have the non standard port, but in the bootstrap it's still 22. Since the machine boots up at 22. Or maybe I'm not understanding what you're saying? (more than likely :)). Hope to see you or someone from your team at OSCON later this week.
– Vid Luther
Jul 24 '11 at 15:34
I wouldn't bother with changing the port as setting SSH to run on an alternate port doesn't really increase security. An attacker of any sophistication (or one who wants to find out if you're running vulnerable SSH) is going to scan all the ports available.
– jtimberman
Aug 2 '11 at 4:06
I'm not changing ports for "security" like that, we're running proftpd with mod_sftp on port 22, and on a non standard port which would be needed for chef, and actual ssh only.
– Vid Luther
Aug 3 '11 at 20:03
add a comment |
This has been in chef since version 0.9.16. You can configure the port by adding the following to your .chef/knife.rb.
knife[:ssh_port] = '22'
Change 22 to the port you want. You don't need to pass -c to the knife bootstrap command if your configuration is in .chef/knife.rb in the current directory.
Ticket for this feature.
Commit for the change.
More information on configuring knife can be found on the Chef wiki:
- http://wiki.opscode.com/display/chef/Knife
- http://wiki.opscode.com/display/chef/Knife+Bootstrap
answered Jul 24 '11 at 3:18
jtimbermanjtimberman
6,87823041
jtimberman, I saw the knife[:ssh_port] option, but the issue is I change the port to non 22, AFTER the bootstrap, so in knife.rb, I have the non standard port, but in the bootstrap it's still 22. Since the machine boots up at 22. Or maybe I'm not understanding what you're saying? (more than likely :)). Hope to see you or someone from your team at OSCON later this week.
– Vid Luther
Jul 24 '11 at 15:34
I wouldn't bother with changing the port as setting SSH to run on an alternate port doesn't really increase security. An attacker of any sophistication (or one who wants to find out if you're running vulnerable SSH) is going to scan all the ports available.
– jtimberman
Aug 2 '11 at 4:06
I'm not changing ports for "security" like that, we're running proftpd with mod_sftp on port 22, and on a non standard port which would be needed for chef, and actual ssh only.
– Vid Luther
Aug 3 '11 at 20:03
add a comment |
This has been in chef since version 0.9.16. You can configure the port by adding the following to your .chef/knife.rb.
knife[:ssh_port] = '22'
Change 22 to the port you want. You don't need to pass -c to the knife bootstrap command if your configuration is in .chef/knife.rb in the current directory.
Ticket for this feature.
Commit for the change.
More information on configuring knife can be found on the Chef wiki:
- http://wiki.opscode.com/display/chef/Knife
- http://wiki.opscode.com/display/chef/Knife+Bootstrap
answered Jul 24 '11 at 3:18
jtimbermanjtimberman
6,87823041
This has been in chef since version 0.9.16. You can configure the port by adding the following to your .chef/knife.rb.
knife[:ssh_port] = '22'
Change 22 to the port you want. You don't need to pass -c to the knife bootstrap command if your configuration is in .chef/knife.rb in the current directory.
Ticket for this feature.
Commit for the change.
More information on configuring knife can be found on the Chef wiki:
- http://wiki.opscode.com/display/chef/Knife
- http://wiki.opscode.com/display/chef/Knife+Bootstrap
answered Jul 24 '11 at 3:18
jtimbermanjtimberman
6,87823041
answered Jul 24 '11 at 3:18
jtimbermanjtimberman
6,87823041
answered Jul 24 '11 at 3:18
jtimbermanjtimberman
6,87823041
answered Jul 24 '11 at 3:18
jtimbermanjtimberman
6,87823041
6,87823041
jtimberman, I saw the knife[:ssh_port] option, but the issue is I change the port to non 22, AFTER the bootstrap, so in knife.rb, I have the non standard port, but in the bootstrap it's still 22. Since the machine boots up at 22. Or maybe I'm not understanding what you're saying? (more than likely :)). Hope to see you or someone from your team at OSCON later this week.
– Vid Luther
Jul 24 '11 at 15:34
I wouldn't bother with changing the port as setting SSH to run on an alternate port doesn't really increase security. An attacker of any sophistication (or one who wants to find out if you're running vulnerable SSH) is going to scan all the ports available.
– jtimberman
Aug 2 '11 at 4:06
I'm not changing ports for "security" like that, we're running proftpd with mod_sftp on port 22, and on a non standard port which would be needed for chef, and actual ssh only.
– Vid Luther
Aug 3 '11 at 20:03
add a comment |
jtimberman, I saw the knife[:ssh_port] option, but the issue is I change the port to non 22, AFTER the bootstrap, so in knife.rb, I have the non standard port, but in the bootstrap it's still 22. Since the machine boots up at 22. Or maybe I'm not understanding what you're saying? (more than likely :)). Hope to see you or someone from your team at OSCON later this week.
– Vid Luther
Jul 24 '11 at 15:34
I wouldn't bother with changing the port as setting SSH to run on an alternate port doesn't really increase security. An attacker of any sophistication (or one who wants to find out if you're running vulnerable SSH) is going to scan all the ports available.
– jtimberman
Aug 2 '11 at 4:06
I'm not changing ports for "security" like that, we're running proftpd with mod_sftp on port 22, and on a non standard port which would be needed for chef, and actual ssh only.
– Vid Luther
Aug 3 '11 at 20:03
jtimberman, I saw the knife[:ssh_port] option, but the issue is I change the port to non 22, AFTER the bootstrap, so in knife.rb, I have the non standard port, but in the bootstrap it's still 22. Since the machine boots up at 22. Or maybe I'm not understanding what you're saying? (more than likely :)). Hope to see you or someone from your team at OSCON later this week.
– Vid Luther
Jul 24 '11 at 15:34
jtimberman, I saw the knife[:ssh_port] option, but the issue is I change the port to non 22, AFTER the bootstrap, so in knife.rb, I have the non standard port, but in the bootstrap it's still 22. Since the machine boots up at 22. Or maybe I'm not understanding what you're saying? (more than likely :)). Hope to see you or someone from your team at OSCON later this week.
– Vid Luther
Jul 24 '11 at 15:34
I wouldn't bother with changing the port as setting SSH to run on an alternate port doesn't really increase security. An attacker of any sophistication (or one who wants to find out if you're running vulnerable SSH) is going to scan all the ports available.
– jtimberman
Aug 2 '11 at 4:06
I wouldn't bother with changing the port as setting SSH to run on an alternate port doesn't really increase security. An attacker of any sophistication (or one who wants to find out if you're running vulnerable SSH) is going to scan all the ports available.
– jtimberman
Aug 2 '11 at 4:06
I'm not changing ports for "security" like that, we're running proftpd with mod_sftp on port 22, and on a non standard port which would be needed for chef, and actual ssh only.
– Vid Luther
Aug 3 '11 at 20:03
I'm not changing ports for "security" like that, we're running proftpd with mod_sftp on port 22, and on a non standard port which would be needed for chef, and actual ssh only.
– Vid Luther
Aug 3 '11 at 20:03
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f292397%2fbootstrapping-servers-with-chef-and-changing-the-ssh-port%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
talked with the people in #chef on FreeNode and figured it out. When bootstrapping, I need to pass -c myboostrap.config where i have a setting saying knife[:ssh_port] = '22'
– Vid Luther
Jul 20 '11 at 23:46
2
Add an answer and accept it, so others can learn from your experience.
– womble♦
Jul 20 '11 at 23:53