https://wjmaritz.dev/tags/ssh/Recent content in Ssh on Wilhelm MaritzHugo -- gohugo.ioenSat, 19 Sep 2026 00:00:00 +0000https://wjmaritz.dev/posts/shadow-locked-account/Sat, 19 Sep 2026 00:00:00 +0000https://wjmaritz.dev/posts/shadow-locked-account/<p>I built a small container to run coding agents on my ZimaBoard, reachable over SSH, key-only, no root login. It is the same box from <a href="https://wjmaritz.dev/posts/tailscale-login-loop/">the Tailscale login that could never finish</a>. The first login was refused:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-text" data-lang="text"><span style="display:flex;"><span>Permission denied (publickey) </span></span></code></pre></div><h2 id="narrowing-it-down">Narrowing it down</h2> <p>An <code>ssh -v</code> trace showed my machine offering the right key and the server rejecting it, so the fault was inside the container. The sshd config was fine: <code>sshd -T</code> confirmed <code>PasswordAuthentication no</code>, <code>PermitRootLogin no</code> and <code>AllowUsers dev</code>, all as intended.</p>