Applicable to:
- SolusVM 1
- SolusVM 2
Question
How to provide SolusVM Support with access to the server?
Answer
IP Restriction
Access must be IP-restricted to the addresses specified below. Access that isn't IP-restricted may be rejected or removed.
- Connect to the server via SSH
-
Make sure PubkeyAuthentication is enabled in SSH configuration
# sed -i '/PubkeyAuthentication/c\PubkeyAuthentication yes' /etc/ssh/sshd_config
-
Validate the config file after changes:
# sshd -t
Warning: in case of any error messages above, review them closely before proceeding with the next step.
-
Restart sshd service:
# service sshd restart
-
Download the script:
# curl -o install_accesskey.sh https://raw.githubusercontent.com/solusvm-support/helpers/master/install_accesskey.sh
-
Install public key:
# sh install_accesskey.sh add
-
Restart sshd service:
# service sshd restart
-
Keys may be removed after conclusion of support incident using the command below:
# sh install_accesskey.sh remove
If SSH private key access has already been provided, no additional access is required. The Management Console will be temporarily available for SolusVM Technical Support engineers from the Management Node. Access will be revoked automatically once the browser session ends.
- Create a temporary user account with a login and password for investigating only the current issue.
- Limit access to the SolusVM UI using the following article - How to restrict an access for the user based on the specific IP address in SolusVM 1 and 2?
- Log in to the Client Area at https://www.soluslabs.com/clients/clientarea.php.
- Add the newly created user's details to access the Management Console as a reply to the ticket:
- Disable or remove the temporary account once the support incident is resolved.
Note: If remote access to the server is limited with firewall, please make sure that it is allowed from SolusVM Support IP addresses:
195.214.233.0/24
91.204.24.0/22
104.30.179.199
104.30.174.141
2a09:bac0:1001:68e::/64
2a09:bac0:1000:16c2::/64
Comments
91.204.25.0/22 in step 2 Add server access as a reply to the ticket: is not a valid subnet. What are the subnets on 91.204.24.0 and 91.204.25.0 supposed to be?
Please sign in to leave a comment.