[stable/zed] Add SSH hardening (#1316)

This is an automated cherry-pick of #1300 /assign mnaser
vexxhost · Jun 5, 2024 · 410f511 · 410f511
1 parent b0bef88
commit 410f511
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/images/nova-ssh/Dockerfile b/images/nova-ssh/Dockerfile
@@ -15,3 +15,10 @@ chown -R nova: /etc/ssh
 mkdir /var/run/sshd
 chmod 0755 /var/run/sshd
 EOF
+COPY <<EOF /etc/ssh/sshd_config.d/00-hardening.conf
+Ciphers aes256-ctr,aes192-ctr
+MACs hmac-sha2-512,hmac-sha2-256
+KexAlgorithms diffie-hellman-group-exchange-sha256
+HostKeyAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
+MaxAuthTries 3
+EOF