SSH

Linux

Host setup

1. Log onto each host

   E.g.

   ssh onpremadmin@onprem-193a18cb-ubuntu-01.northeurope.cloudapp.azure.com -i ~/.ssh/citadel
   

2. Install aadsshlogin (optional)

   Can login on with local ID without this by the way.

   sudo apt update && sudo apt install aadsshlogin
   

   Will add a custom policy to install the extension.

3. Add port 22 to incoming connections list

   sudo azcmagent config set incomingconnections.ports 22
   

4. Exit

   exit
   

Create the endpoint

1. Variables

   vm=ubuntu-01
   

   vmId=$(az connectedmachine show --name $vm --resource-group arc_pilot --query id --output tsv)
   

2. Create the endpoint

   az rest --method \
     put --uri $vmId/providers/Microsoft.HybridConnectivity/endpoints/default?api-version=2021-10-06-preview \
     --body '{"properties": {"type": "default"}}'
   

Local ID

1. Connect with local

   az ssh arc --local-user onpremadmin --resource-group arc_pilot --name ubuntu-01 --private-key-file ~/.ssh/citadel
   

   Expected prompt: onpremadmin@ubuntu-01:~$.

   Set the private key file to the right one.

AAD auth

1. RBAC assignment

   Need either of these on the Arc VM

   • Virtual Machine Administrator Login
   • Virtual Machine User Login

2. Connect with AAD

   az ssh arc --resource-group arc_pilot --name ubuntu-01
   

   Expected prompt: richeney@azurecitadel.com@ubuntu-01:~$

Stretch

Follow the Code Tunnels as a bonus.

1. Install & configure

   wget https://code.visualstudio.com/sha/download?build=stable\&os=cli-alpine-x64 -O /tmp/code.tar.gz
   sudo tar -zxvf /tmp/code.tar.gz -C /usr/local/bin && rm /tmp/code.tar.gz
   code tunnel --name $(hostname) --accept-server-license-terms
   

If they ask, we can delete the public IP, or remove them from the array of permitted source IP addresses.

---