Menu

Chef Supermarket

Adoptable Cookbooks List

Looking for a cookbook to adopt? You can now see a list of cookbooks available for adoption!
List of Adoptable Cookbooks

Supermarket Belongs to the Community

Supermarket belongs to the community. While Chef has the responsibility to keep it running and be stewards of its functionality, what it does and how it works is driven by the community. The chef/supermarket repository will continue to be where development of the Supermarket application takes place. Come be part of shaping the direction of Supermarket by opening issues and pull requests or by joining us on the Chef Mailing List.

View our collection of guides, documentation, and articles

Cookbooks
Advanced Options

Select Badges

Select Supported Platforms

Select Status

RSS

r1337-sshconfig (7) Versions 0.1.5

Configure OpenSSH with standard or hardened settings

Policyfile
Berkshelf
Knife 
cookbook 'r1337-sshconfig', '= 0.1.5', :supermarket
cookbook 'r1337-sshconfig', '= 0.1.5'
knife supermarket install r1337-sshconfig
knife supermarket download r1337-sshconfig
README
Dependencies
Changelog
Quality 100%

Chef Cookbook - SSH Configuration

This Chef cookbook will configure SSH on Linux servers to be compliant with Route 1337 security policies. There are a few versions of the configuration depending on the recipe that is chosen

SSH Config Recipes

  1. standardssh.rb is the standard recipe suitable for use on internal LANs or where networks are trusted to be secured
  2. hardenedssh.rb is a recipe for use in DMZs or other networks where sophisticated attacks are either expected, or where more stringent policies exist

Changes Performed

  1. Configures OpenSSH server with custom security settings depending on recipe selected.
  2. Ensures OpenSSH is installed, configured and enabled/running

Requirements

  1. Chef (Tested on Chef 13.6.4)
  2. Linux chef-clients (Tested on Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, and CentOS 7.2 but kitchen will let you test anything you want)
  3. The openssh cookbook from Chef Supermarket

Installation Tips

  1. We personally use Berks to install this into Chef servers, because it will grab the dependencies for you as well.
  2. You must set the attribute ['r1337-sshconfig']['sshpolicy'] to hardened if you want something stronger than the default. For most people the default is fine.

Limitations

  1. None so far :)

Known Issues

  1. None so far :)

Use Cases

Configuring SSH as part of a base security requirement

Route 1337, LLC operates entirely on donations. If you find this cookbook useful, please consider donating via one of these methods.

  1. Bitcoin: 1CnzzrPh3iirEkLRLiWFKXDV9i5TXHQjE2
  2. Bitcoin Cash: qzcq645swgd87s7t5mmmjcumf4armhtjt5euww5c29
  3. Litecoin: LWYbc9hf5ErJsF874Q3wwmMiASHRWgwrjR
  4. Ethereum: 0x117543aa7a4D704849171cA06568Ece71B111D18

Thank you for your support!

Dependent cookbooks

openssh >= 0.0.0

Contingent cookbooks

There are no cookbooks that are contingent upon this one.

SSH Configuration - Changelog

A list of all the changes made to this cookbook

Version 0.1.5

  1. Added testing to verify Ubuntu 18.04 support
  2. Documentation fixes

Version 0.1.4

  1. metadata.rb has been changed to set 13.6.4 as the minimum chef-client version instead of the only version

Version 0.1.3

  1. Kitchen is now locked to testing on the version of Chef we use in production

Version 0.1.2

  1. Bringing documentation in line with Chef Supermarket Foodcritic expectations

Version 0.1.1

  1. Set AllowTcpForwarding no on the Hardened configuration

Version 0.1.0

  1. Initial Release

License Metric 
            
0.1.5 passed this metric

Route 1337, LLC Route 1337, LLC
Matthew Ahrenstein

Details

View Source View Issues

Updated May 1, 2018 Created on

Supported Platforms

  • centos >= 0.0.0
  • ubuntu >= 0.0.0

License

MIT

Required Chef Infra Client

(>= 13.6.4)

Download Cookbook