clawdie/colibri
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 45

docs(hive-routing): fleet SSH reliability — password off, agent keys, PF limits #246

Merged
clawdie merged 1 commit from fix/ssh-agent-keys-persistence into main 2026-06-27 23:51:11 +02:00
Conversation 0 Commits 1 Files changed 1 +48
clawdie commented 2026-06-27 23:50:27 +02:00
Owner
Copy link

Covers the three root causes discovered during osa→debby SSH setup:

  1. PasswordAuthentication no — removes fail2ban's reason to exist
  2. AddKeysToAgent yes — prevents ksshaskpass popups on reconnect
  3. FreeBSD PF rate limiting — defense in depth for osa

Sam & Hermes

Covers the three root causes discovered during osa→debby SSH setup: 1. PasswordAuthentication no — removes fail2ban's reason to exist 2. AddKeysToAgent yes — prevents ksshaskpass popups on reconnect 3. FreeBSD PF rate limiting — defense in depth for osa Sam & Hermes
clawdie added 1 commit 2026-06-27 23:50:31 +02:00
docs(hive-routing): fleet SSH reliability — password off, agent keys, PF limits
Some checks are pending
CI / rust (pull_request) Waiting to run
Details
CI / markdown (pull_request) Waiting to run
Details
CI / port (pull_request) Waiting to run
Details
CI / agent-jail-pkgs (pull_request) Waiting to run
Details
780b06de56 
Covers the three root causes discovered during osa→debby SSH setup:
1. PasswordAuthentication no — removes fail2ban's reason to exist
2. AddKeysToAgent yes — prevents ksshaskpass popups on reconnect
3. FreeBSD PF rate limiting — defense in depth for osa

Sam & Hermes
clawdie merged commit 39f74b1c8c into main 2026-06-27 23:51:11 +02:00
clawdie deleted branch fix/ssh-agent-keys-persistence 2026-06-27 23:51:25 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
first-proof blocker

gates the first proven end-to-end

  
hardening

security/robustness follow-up, not a first-proof gate

No labels
first-proof blocker
hardening
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: clawdie/colibri#246
No description provided.
Delete branch "fix/ssh-agent-keys-persistence"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?