From 5b7e5834a990676856d87f2913a9d85f992d9b7b Mon Sep 17 00:00:00 2001 From: Dusty Mabe Date: Fri, 28 Jul 2023 12:22:43 -0400 Subject: [PATCH] sshaccess: provide separate config for batcave01 This has the benefit of making `ssh user@batcave01` get resolved to batcave01.iad2.fedoraproject.org which will make the known_hosts @cert-authority *.iad2.fedoraproject.org configuration apply. --- modules/sysadmin_guide/pages/sshaccess.adoc | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/modules/sysadmin_guide/pages/sshaccess.adoc b/modules/sysadmin_guide/pages/sshaccess.adoc index 5c4b64c..9a0dd34 100644 --- a/modules/sysadmin_guide/pages/sshaccess.adoc +++ b/modules/sysadmin_guide/pages/sshaccess.adoc @@ -65,8 +65,10 @@ Host bastion.fedoraproject.org User FAS_USERNAME (all lowercase) ProxyCommand none ForwardAgent no -Host *.iad2.fedoraproject.org *.qa.fedoraproject.org 10.3.160.* 10.3.161.* 10.3.163.* 10.3.165.* 10.3.167.* 10.3.171.* *.vpn.fedoraproject.org batcave01 +Host *.iad2.fedoraproject.org *.qa.fedoraproject.org 10.3.160.* 10.3.161.* 10.3.163.* 10.3.165.* 10.3.167.* 10.3.171.* *.vpn.fedoraproject.org ProxyCommand ssh -W %h:%p bastion.fedoraproject.org +Host batcave01 + HostName %h.iad2.fedoraproject.org .... Note that there are 2 bastion servers: bastion01.fedoraproject.org