Enable root ssh access to LXC

[vdias]

Enable root ssh access to LXC.

[tteck]

1. If you use auto login, set a root password sudo passwd root
2. nano /etc/ssh/sshd_config replace PermitRootLogin prohibit-password with PermitRootLogin yes
3. systemctl restart sshd

[ruhanirabin]

If you want to do it in a single line command using your password as a parameter, this script line may reduce using your keyboard and manual input. please note this is not intended to use outside internal network environments

You just modify the part ➡️ Your@StrongPassword

sudo sh -c 'echo "root:$1" | chpasswd && sed -i "/^#*PermitRootLogin/c\PermitRootLogin yes" /etc/ssh/sshd_config; grep -q "^PermitRootLogin" /etc/ssh/sshd_config || echo "PermitRootLogin yes" >> /etc/ssh/sshd_config && systemctl restart sshd' -- "Your@StrongPassword"

This will check if there

• is a commented line with PermitRootLogin
• if yes is not set as the part of PermitRootLogin
• if the line Permitrootlogin is missing from the file

This will enable Root login (gracefully) and reload SSHD accordingly so your next login will require password to login.

this was tested on Debian 12 LXCs. you can modify it as per your needs. I hope it helps someone. Thanks @tteck

[hellofaduck]

Maybe you can add this option to container creation gui, because it's so frustrating to login through proxmox gui to every created container, edit sshd config, restart it etc. It's not a big deal, but we here because automation, isn't it? :)

[bilogic]

This is a digression from this discussion: but if only 1 OS is allowed, why still ask the user?

And, I was answering your question.

There was 1 script (not MariaDB) and I cannot remember which one, where only Debian works.

As a more concrete example, after selecting Debian, I'm asked which version 11/12... which I have no idea how to answer.

[tteck]

There's more than one that way. 🤷🏻‍♂️ It is called "Advanced". If using advanced settings feels uncomfortable, and you only need SSH, it's best to stick with the method described above. I'm not sure where this conversation is heading.

[bilogic]

Well, you have answered no to my main question. Everything else was just to support why I raised the main question, I was not seeking answers to those.

[tteck]

As a more concrete example, after selecting Debian, I'm asked which version 11/12... which I have no idea how to answer.

I've already answered this! Each script when using advanced settings will state the default. #385 (reply in thread)

[ruhanirabin]

Hats off to @tteck . I always use debian 12 for the LXC and all of them (20x) working and stable. I am planning to use ansible but not sure ansible is compatible with LXC (it should be, by theory) - that is why I am here and he already answered the question of SSH login enable option manually which i will go through.