From owner-freebsd-questions@FreeBSD.ORG Thu Jun 16 14:07:13 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0B39516A41C for ; Thu, 16 Jun 2005 14:07:13 +0000 (GMT) (envelope-from ean@hedron.org) Received: from prosporo.hedron.org (hedron.org [66.11.182.60]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9FF1F43D55 for ; Thu, 16 Jun 2005 14:07:12 +0000 (GMT) (envelope-from ean@hedron.org) Received: from localhost.hedron.org (localhost.hedron.org [127.0.0.1]) by prosporo.hedron.org (Postfix) with ESMTP id 50649C24D for ; Thu, 16 Jun 2005 10:07:16 -0400 (EDT) From: Ean Kingston To: freebsd-questions@freebsd.org Date: Thu, 16 Jun 2005 10:07:15 -0400 User-Agent: KMail/1.8 References: <42B18661.6010101@grokking.org> In-Reply-To: <42B18661.6010101@grokking.org> X-Face: W{mkf[fd1042ubL1FZ(CABIMzn~rdu<:SW\^LF_RB' Subject: Re: Remote server warnings X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jun 2005 14:07:13 -0000 On June 16, 2005 10:02 am, Greg Maruszeczka wrote: > Jonathan Arnold wrote: > > I'm going to be moving my server to a remote site, where I'll only > > be able to ssh to it for any kind of service. It has been local, > > hooked up via a KVM switch, so it will be a new setup for me. > > > > What sorts of problems should I keep an eye out for? What kind of > > setup should I have? I've turned on ssh. What else should I do? > > How hard will it be to update my system remotely? > > > > Thanks in advance for any help you can provide. If you can, switch the console to a serial port and connect a null modem cable between the serial port of your system and some other system that you have at least user level access to at the remote site. That way you can get to the console in the event of problems. > > Use rsa/dsa keys and disable password auth in sshd_config. > > You can generally do port upgrades via ssh without issue. Obviously you > have to be careful when performing major updates like `make world` where > it's usually recommended that you drop to single-user mode before > installing world. Some folks claim they do the whole make world dance by > remote and just don't reboot or drop to single-user mode. Personally, > I'd never do this on a production box but I recall some good discussion > on this list a few months ago about this very topic. Check the archives > if you're interested. > > G > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" -- Ean Kingston E-Mail: ean AT hedron DOT org URL: http://www.hedron.org/ I am currently looking for work. If you need competent system/network administration please feel free to contact me directly.