4 min read
Your terminal now has a copilot
An AI helper docked beside the live shell: it reads what's on your screen, explains the error, and hands you the next command to insert or run — one click, with a guard on the destructive ones.
Posts tagged “ssh”
Engineering notes on running Linux fleets — security, operations and what we're building at CentralHost.
5 min read
Close port 22 without locking yourself out
Closing SSH to the world is the easy part. The reason people don't is fear of being locked out. Here's how to keep two ways in — everyday and emergency — and only then shut the door, using CentralHost's own firewall and bastion.
6 min read
Outside support needs the server. Hand them a terminal, not your password.
A ticket lands where the only fix lives on the box — and the person who can fix it doesn't work for you. Sharing root or spinning up a temp SSH user are both bets you'll regret. CentralHost issues a one-time, time-boxed, audited terminal instead: the guest operates the server without ever holding a credential to it.
5 min read
SSH doesn't remember what you did. Your platform should.
A shell session is gone the moment you close it — no record of the commands, the output, or the order. This is why CentralHost records every operator terminal: not to watch anyone, but because a record beats your memory at 2am two weeks later.
4 min read
When a client asks what you changed on their server
You have root on machines you don't own. Sooner or later a client asks what your team did in there — and "trust me" is not an answer. The difference between a defensive conversation and a five-second one is whether the work was recorded.
4 min read
Stop exposing port 22 to the internet
Hardening sshd is not the same as removing it from the attack surface. Three levels, from key-only auth to closing the port entirely.