configuration - tulliolo/mobybolt GitHub Wiki

You are now on the command line of your own Bitcoin node. Let's start with the configuration.

From now on, all operations will be performed by connecting in ssh as admin user.

Table of contents

Disable root access

We will disable root access for security reasons.

Disable Secure Shell root access

  • Type the following command:

    $ sudo sed -i 's/^#PermitRootLogin .*$/PermitRootLogin no/' /etc/ssh/sshd_config
    
  • Verify the configuration (the output should look like below):

    $ cat /etc/ssh/sshd_config | grep PermitRootLogin
    > PermitRootLogin no
    > # the setting of "PermitRootLogin prohibit-password".
    
  • Restart the sshd service

    $ sudo systemctl restart sshd
    

Disable root password

  • Type the following command:

    $ sudo passwd -l root
    > passwd: password changed.
    
  • Try to become root using the root password defined during installation (you shouldn't be able to do this):

    $ su -
    > Password: 
    > su: Authentication failure
    

    💡 From now on you will only have root access using sudo and Password [ A ]:

    $ sudo su -
    > [sudo] password for admin:
    $ exit
    

Login with SSH keys (optional)

You can start to access MobyBolt without a password by following the SSH keys bonus guide

System update

It is important to keep the system up-to-date with security patches and application updates. The "Advanced Packaging Tool" (apt) makes this easy. To update the operating system and all installed software packages, run the following commands:

$ sudo apt update
$ sudo apt full-upgrade

💡 Do this regularly every few months to get security-related updates.

⚠️ **GitHub.com Fallback** ⚠️