Our Salt state core/sshd does not set PubkeyAcceptedAlgorithms, so ssh-rsa (SHA-1) is blocked by default — this has been the case since OpenSSH 8.8 (released 2021-09-26, see https://www.openssh.com/txt/release-8.8).

With Salt, sudo files content are now managed from rOPS.

Bruteforce attack scenario possible, so we're only interested by usernames defined in users.sls, not by "root" (can't login by SSH) or generic accounts like "docker" (doesn't exist):

Did a run this night to update Certbot files, states are currently correct:

Here we are with D3812 build:

That builds properly:

In T1098#21963, @dereckson wrote:

Tested a build manually successfully with:

$ git clone https://github.com/Learath2/sBNC.git
$ cd sBNC
$ cc *.c -o sbnc
$ sudo cp sbnc /usr/local/bin

Une fois que tu as retrouvé les accès SSH pour le web statique:

• WindRiver: automatiquement https://windriver.nasqueron.org/~xcombelle est disponible si tu places des fichiers dans /var/home-wwwroot/xcombelle (je ne sais plus si ça se crée automatiquement avec symlink vers $HOME/public_html, à vérifier)
• Eglide: https://www.eglide.org/~xcombelle pour $HOME/public_html

If as an Eglide user you need this

Crossed-out files no longer needing Shellcheck.