I think port 22 is just fine for a computer behind a NAT router with no direct access (open/forwarded ports) to the Internet. If you want to open that system up to the Internet and access it from outside of its own internal network, setting a different port is probably a good idea, but even better yet set up logins through public and private key authentication.
You may also want to teach about the authorized_keys file as well as the ssh-copy-id command, because many server systems do not allow password logins. Some are key only, and a lot of first time users get tripped up with ssh keys. Also, disabling root logins in sshd config, and changing the listen port might be helpful too.
If you REEEEEALLY wanna kick it up a notch, implement the tool “keychain” as well. You only have to enter your passphrase per reboot; instead of per login shell.
Microsoft Windows 10 and newer have been shipping with the OpenSSH client pre-installed for some time now... 3-5 years. They also off the OpenSSH server but that is not installed by default and if desired, you can manually install that by Adding Windows Components from the Control Panel.
scp should be in every ssh tutorial, often you just want to do that, copy files. Though scp is easy but cumbersome (lot of typing which could definitely be solved by the developer) to use it can be a bad experience to look up how to use it, I only found bad explanations both with written articles and a YT-video. The short version: it is like cp but now you enter the system-information (user@IP) before the : and the path after the :
Literally had this issue not even a week ago. Valheim server in Linode and needed to backup world files. Accidentally figured out what I was doing wrong. I was already remoted into the server from my home computer and THEN ran SCP... It failed successfully... AKA I copied from the Valheim server to the Valheim server......!noice Exited the SSH session, ran the command again and it worked just fine. Noice!
You mentioned your Linode server is in Canada whilst you are in the US - any issues there for businesses with data sovereignty requirements to remain compliant with data protection like GDPR et al?
Is there ANYONE who is Not using a paid service setting up a Linux Mint server who is just showing how to do it in English from the beginning with n00b details explained?
When I set up my MythTV box, I could not use SSH at all. I assumed that the SSH server was automatically built in to any and all distros. I still never got GUI SSH Working.
love the video. i had one doubt. i had created one azure linux vm using terraform on top of that i am installing packages using ansible by remote exec inside terraform script now i am not able connect to remote server through hostname and my terraform and ansible is running in docker container . is there any way to connect to remote server with hostname for establishing a ssh connection.. Thanks in advane any video tutorial or blog is appreciated.
I installed Ubuntu 22.04.3 LTS Desktop on one of my computers. When I tried to connect with ssh, I get the connection refused. So, the base installation of the ssh server software must not have been installed with Ubuntu 22.04.3 LTS Desktop, unless something on my local area network is blocking the port 22 needed for ssh to work. Could a hacker keep trying different usernames and passwords in rapid succession forever to try to break into the ssh connection? Or, is there a limit of failed attempts that would cause them to have to wait a period of time to retry accessing the ssh connection? I think if you simply changed the ssh port, the hacker could try to ssh into every possible port, until they get a response. Then they would know which port you switched ssh to use.
Once you create your key on the local machine, if you want to move that key what is the best way? Keep it in sync with Syncthing across multiple machines?
@@teensuicide9103 well let’s say a PC dies - do you save the key somewhere maybe in an encrypted drive and copy the key to home dir … or generate a new key?
Love the new intro! Great to see the progression of the channel over the years :)
In addition of changing the port you can also make use of port knocking to keep it hidden from port scans.
This has become my go-to channel for all things Linux
I think port 22 is just fine for a computer behind a NAT router with no direct access (open/forwarded ports) to the Internet. If you want to open that system up to the Internet and access it from outside of its own internal network, setting a different port is probably a good idea, but even better yet set up logins through public and private key authentication.
An episode about LVM (Logical Volume Manager) would be cool.
And how can it be used to snapshot disks or even backup them.
You may also want to teach about the authorized_keys file as well as the ssh-copy-id command, because many server systems do not allow password logins. Some are key only, and a lot of first time users get tripped up with ssh keys. Also, disabling root logins in sshd config, and changing the listen port might be helpful too.
Jay already did that in his first steps with a new Linux server video
@@javabeanz8549 Which didn't exist when I wrote the above comment.
@@MatthewKressel You must have watched this video the moment it came out then, they weren't very far apart in my notifications.
If you REEEEEALLY wanna kick it up a notch, implement the tool “keychain” as well.
You only have to enter your passphrase per reboot; instead of per login shell.
Microsoft Windows 10 and newer have been shipping with the OpenSSH client pre-installed for some time now... 3-5 years. They also off the OpenSSH server but that is not installed by default and if desired, you can manually install that by Adding Windows Components from the Control Panel.
scp should be in every ssh tutorial, often you just want to do that, copy files. Though scp is easy but cumbersome (lot of typing which could definitely be solved by the developer) to use it can be a bad experience to look up how to use it, I only found bad explanations both with written articles and a YT-video. The short version: it is like cp but now you enter the system-information (user@IP) before the : and the path after the :
Literally had this issue not even a week ago. Valheim server in Linode and needed to backup world files. Accidentally figured out what I was doing wrong. I was already remoted into the server from my home computer and THEN ran SCP... It failed successfully... AKA I copied from the Valheim server to the Valheim server......!noice
Exited the SSH session, ran the command again and it worked just fine. Noice!
THANKS MAN
Please do a video on SSH certificates
thanks. very good intro
You mentioned your Linode server is in Canada whilst you are in the US - any issues there for businesses with data sovereignty requirements to remain compliant with data protection like GDPR et al?
Is there ANYONE who is Not using a paid service setting up a Linux Mint server who is just showing how to do it in English from the beginning with n00b details explained?
what is sshd and ssh difference?
love it..
When I set up my MythTV box, I could not use SSH at all. I assumed that the SSH server was automatically built in to any and all distros.
I still never got GUI SSH Working.
love the video. i had one doubt. i had created one azure linux vm using terraform on top of that i am installing packages using ansible by remote exec inside terraform script now i am not able connect to remote server through hostname and my terraform and ansible is running in docker container . is there any way to connect to remote server with hostname for establishing a ssh connection.. Thanks in advane any video tutorial or blog is appreciated.
I installed Ubuntu 22.04.3 LTS Desktop on one of my computers. When I tried to connect with ssh, I get the connection refused. So, the base installation of the ssh server software must not have been installed with Ubuntu 22.04.3 LTS Desktop, unless something on my local area network is blocking the port 22 needed for ssh to work.
Could a hacker keep trying different usernames and passwords in rapid succession forever to try to break into the ssh connection? Or, is there a limit of failed attempts that would cause them to have to wait a period of time to retry accessing the ssh connection? I think if you simply changed the ssh port, the hacker could try to ssh into every possible port, until they get a response. Then they would know which port you switched ssh to use.
Once you create your key on the local machine, if you want to move that key what is the best way? Keep it in sync with Syncthing across multiple machines?
To dozens of managed machines or to a couple of devices? Because if that's the case you can just use a USB stick, eh?
@@teensuicide9103 well let’s say a PC dies - do you save the key somewhere maybe in an encrypted drive and copy the key to home dir … or generate a new key?
@@jacksonsystemslimited sure, it's a good idea to keeo them backed up, possibly on its own drive and definitely encrypted
@@teensuicide9103 ok cool, so after a reload if an IS you can just copy your key back to the .ssh directory and your golden?
Hi can you tell me how i can get that moving text background on one of your machines please. I really love to put it on my machine too...
It's probably a youtube video set to full-screen
@@zen_nabu ohhh i see...
🙌🏻
Where in MI are you?
👍👍👍