You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Securedrop servers use a hardened sshd config that disables sftp. We rely on scp instead for Ansible's communications from workstations to servers. With OpenSSH 9, scp is on the road to deprecation, so we should use sftp instead. This would most likely involve:
Updating the sshd_config on existing and new installs to add an sftp stanza
Updating the ansible config to use sftp only (other options include scp, tunnelling over ssh, and a mode that tries them all. IN the interests of predictability, we should specify only one.)
The text was updated successfully, but these errors were encountered:
Securedrop servers use a hardened sshd config that disables sftp. We rely on scp instead for Ansible's communications from workstations to servers. With OpenSSH 9, scp is on the road to deprecation, so we should use sftp instead. This would most likely involve:
The text was updated successfully, but these errors were encountered: