Buildduty/day 1 checklist: Difference between revisions

Buildduty/day 1 checklist (view source)

Revision as of 13:50, 31 January 2018

77 bytes added , 31 January 2018

Changed the Jumphost config file, based on recommendations from Dragos Crisan

Dlabici

Confirmed users

67

edits

@@ Line 59: / Line 59: @@
 example ssh config:
-  # rejh - release engineering jump host
-  Host rejh?.srv.releng.????.mozilla.com
+ # Ensure KnownHosts are unreadable if leaked - it is otherwise easier to know which hosts your keys have access to.
-      ControlMaster auto
+ HashKnownHosts yes
-      ControlPath ~/.ssh/ssh-%C
+ # Host keys the client accepts - order here is honored by OpenSSH
-      ControlPersist 10m
+ HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ssh-rsa,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256
-      ForwardAgent no
+ Host hg.mozilla.org git.mozilla.org
+     User dlabici@mozilla.com
-  Host *.releng.mdc1.mozilla.com !rejh?.srv.releng.mdc1.mozilla.com !*.private.releng.????.mozilla.com
+     Compression yes
-      ProxyJump rejh1.srv.releng.mdc1.mozilla.com
+     ServerAliveInterval 300
+ Host *.mozilla.com
-  Host *.releng.us??.mozilla.com *.releng.scl3.mozilla.com !rejh?.srv.releng.????.mozilla.com !*.private.releng.scl3.mozilla.com
+     User dlabici
-      ProxyJump rejh1.srv.releng.scl3.mozilla.com
+     IdentityFile ~/.ssh/id_rsa_mozilla_2017-05-12
+     Compression yes
-  Host *
+     ServerAliveInterval 300
-      # Ensure KnownHosts are unreadable if leaked - it is otherwise easier to know which hosts your keys have access to.
+ Host *.build.mozilla.org
-      HashKnownHosts yes
+     Compression yes
-      # Host keys the client accepts - order here is honored by OpenSSH
+     User cltbld
-      # HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ssh-rsa,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-
+     ServerAliveInterval 300
-  nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256
+ Host rejh?.srv.releng.????.mozilla.com
-      TCPKeepAlive yes
+     ControlMaster auto
-      ServerAliveInterval 120
+     ControlPath ~/.ssh/ssh-%C
+     ControlPersist 10m
-  Host *.mozilla.com *.mozilla.org
+     ForwardAgent no
-      IdentityFile ~/.ssh/id_rsa_mozilla
+ Host .releng.mdc1.mozilla.com !rejh?.srv.releng.mdc1.mozilla.com !.private.releng.????.mozilla.com
+     ProxyCommand ssh -W %h:%p rejh1.srv.releng.mdc1.mozilla.com
-  Host hg.mozilla.org git.mozilla.org
+ Host .releng.us??.mozilla.com .releng.scl3.mozilla.com !rejh?.srv.releng.????.mozilla.com !*.private.releng.scl3.mozilla.com
-      User jlund@mozilla.com
+ # !rpmpackager1.srv.releng.use1.mozilla.com
-      Compression yes
+     ProxyCommand ssh -W %h:%p rejh1.srv.releng.scl3.mozilla.com
-      ServerAliveInterval 300
 == Buildduty LDAP groups ==