Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
ac77826a
Commit
ac77826a
authored
Sep 18, 2017
by
Nick Thomas
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Update SSH database lookup instructions for CentOS 7.4
parent
5f9c1a0c
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
13 additions
and
9 deletions
+13
-9
doc/administration/operations/speed_up_ssh.md
doc/administration/operations/speed_up_ssh.md
+11
-7
doc/gitlab-geo/ssh.md
doc/gitlab-geo/ssh.md
+2
-2
No files found.
doc/administration/operations/speed_up_ssh.md
View file @
ac77826a
...
@@ -15,9 +15,9 @@ GitLab Shell provides a way to authorize SSH users via a fast, indexed lookup to
...
@@ -15,9 +15,9 @@ GitLab Shell provides a way to authorize SSH users via a fast, indexed lookup to
> **Warning:** OpenSSH version 6.9+ is required because
> **Warning:** OpenSSH version 6.9+ is required because
`AuthorizedKeysCommand`
must be able to accept a fingerprint. These
`AuthorizedKeysCommand`
must be able to accept a fingerprint. These
instructions will break installations using older versions of OpenSSH, such as
instructions will break installations using older versions of OpenSSH, such as
those included with CentOS
as of May 2017. If you want to use this feature for
those included with CentOS
6 as of September 2017. If you want to use this
CentOS
, follow [the instructions on how to build and install a custom OpenSSH package]
feature for CentOS 6
, follow [the instructions on how to build and install a custom OpenSSH package]
(#compiling-a-custom-version-of-openssh-for-centos) before continuing.
(#compiling-a-custom-version-of-openssh-for-centos
-6
) before continuing.
Create this file at
`/opt/gitlab-shell/authorized_keys`
:
Create this file at
`/opt/gitlab-shell/authorized_keys`
:
...
@@ -73,14 +73,18 @@ This is a brief overview. Please refer to the above instructions for more contex
...
@@ -73,14 +73,18 @@ This is a brief overview. Please refer to the above instructions for more contex
1.
Reload sshd:
`sudo service sshd reload`
1.
Reload sshd:
`sudo service sshd reload`
1.
Remove the
`/opt/gitlab-shell/authorized_keys`
file
1.
Remove the
`/opt/gitlab-shell/authorized_keys`
file
## Compiling a custom version of OpenSSH for CentOS
## Compiling a custom version of OpenSSH for CentOS
6
Building a custom version of OpenSSH is not necessary for Ubuntu 16.04 users,
Building a custom version of OpenSSH is not necessary for Ubuntu 16.04 users,
since Ubuntu 16.04 ships with OpenSSH 7.2.
since Ubuntu 16.04 ships with OpenSSH 7.2.
However, CentOS users must build their own OpenSSH package to enable SSH
It is also unnecessary for CentOS 7.4 users, as that version ships with
lookups via the database. The following instructions can be used to build
OpenSSH 7.4. If you are using CentOS 7.0 - 7.3, we strongly recommend that you
OpenSSH 7.5 for CentOS 6 and 7:
upgrade to CentOS 7.4 instead of following this procedure. This should be as
simple as running
`yum update`
.
CentOS 6 users must build their own OpenSSH package to enable SSH lookups via
the database. The following instructions can be used to build OpenSSH 7.5:
1.
First, download the package and install the required packages:
1.
First, download the package and install the required packages:
...
...
doc/gitlab-geo/ssh.md
View file @
ac77826a
...
@@ -10,9 +10,9 @@ file.
...
@@ -10,9 +10,9 @@ file.
GitLab 10.0 and higher require database lookups for SSH keys.
GitLab 10.0 and higher require database lookups for SSH keys.
Note this feature is only available on operating systems that support OpenSSH
Note this feature is only available on operating systems that support OpenSSH
6.
9 and above. For CentOS 6
and 7
, see the [instructions on building custom
6.
9 and above. For CentOS 6, see the [instructions on building custom
version of OpenSSH for your server]
version of OpenSSH for your server]
(../administration/operations/speed_up_ssh.html#compiling-a-custom-version-of-openssh-for-centos).
(../administration/operations/speed_up_ssh.html#compiling-a-custom-version-of-openssh-for-centos
-6
).
For both primary AND secondary nodes, follow the instructions on
[
configuring
For both primary AND secondary nodes, follow the instructions on
[
configuring
SSH authorization via database
SSH authorization via database
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment