2026-10-01 08:57:29 <dongdigua> why alpinelinux's sudo and doas are configured --wihout-pam
2026-10-01 09:06:00 <dongdigua> qaqland
2026-10-01 09:06:52 <qaqland> dongdigua: idk :)
2026-10-01 10:26:43 <quinq> Hi
2026-10-01 10:26:58 <quinq> I upgraded a few days ago my Alpine VM, and now at boot it says:
2026-10-01 10:27:10 <quinq>  *   eth0 ...udhcpc: started, v1.38.0
2026-10-01 10:27:10 <quinq>  [ !! ]
2026-10-01 10:27:10 <quinq> ifup: failed to change interface eth0 state to 'up'
2026-10-01 10:27:10 <quinq> udhcpc: socket(AF_PACKET,2,8): Address family not supported by protocol
2026-10-01 10:27:20 <quinq> Any idea what could be happening?
2026-10-01 10:27:56 <quinq> Interface is there
2026-10-01 10:27:56 <quinq> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000
2026-10-01 10:28:13 <quinq>     link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
2026-10-01 10:30:03 <quinq> Sorry nevermind, just saw that extlinux.conf is borked for some reason, it's booting an older kernel that obviously is missing the drivers
2026-10-01 10:30:10 <quinq> Not sure how that happened, I never edit that file
2026-10-01 10:42:07 <drjaska> Hey, I'm setting up a new non-root user on Alpine but I'm struggling with getting sshd to read ~/.ssh/authorized_keys and thus it keeps denying my keys. I'm confused as I didn't do anything different than in Debian and Arch containers just minutes prior.
2026-10-01 10:42:44 <grawity> what does sshd say in its logs?
2026-10-01 10:42:46 <justvik> lol idk
2026-10-01 10:43:16 <drjaska> Where does sshd keep logs on Alpine?
2026-10-01 10:43:27 <drjaska> There's no /var/log/sshd.log
2026-10-01 10:45:24 <grawity> in syslog; from there - wherever syslogd is configured to put 'auth' and 'authpriv' logs
2026-10-01 10:45:25 <justvik> rip api
2026-10-01 10:47:09 <grawity> I *think* /var/log/messages is the default location for everything
2026-10-01 10:47:42 <grawity> you'll want "LogLevel VERBOSE" or maybe even "LogLevel DEBUG2" in your sshd_config
2026-10-01 10:47:47 <drjaska> Ah, /var/log/messages, "auth.info sshd-session[3451]: User usernamehere not allowed because account is locked", that system user has a login shell and they're forced to SSH ForceCommand right after login
2026-10-01 10:48:21 <grawity> yeah those things do not override the account being locked
2026-10-01 10:48:46 <grawity> usermod -U
2026-10-01 10:49:47 <drjaska> Someone online says sshd_config should have "UsePAM yes", Debian defaults that to yes while Alpine defaults to no
2026-10-01 10:50:45 <drjaska> usermod as an executable isn't present on my Alpine system
2026-10-01 10:50:49 <grawity> it'll follow more or less the same logic either way
2026-10-01 10:51:12 <grawity> with PAM enabled, it's pam_unix that'll check whether the account is locked, without PAM it's sshd itself doing that check
2026-10-01 10:51:33 <grawity> (or at least I'd hope they do the same check, would be "fun" if they diverged)
2026-10-01 10:51:59 <grawity> how are you creating the new non-root user?
2026-10-01 10:52:02 <drjaska> :) right, so how can I unlock that account for SSH key logins
2026-10-01 10:53:03 <drjaska> adduser -S -s /bin/sh name
2026-10-01 10:53:33 <drjaska> flags are system user and login shell
2026-10-01 10:53:48 <jvvv> besides enabling pam in sshd_config, also need to install opessh-server-pam
2026-10-01 10:54:20 <andar1an[m]> Podman config structure changed recently right?
2026-10-01 10:54:21 <justvik> rip api
2026-10-01 10:55:48 <grawity> looks like busybox's passwd has -u/--unlock
2026-10-01 10:56:06 <grawity> does it have to be a 'system user' though?
2026-10-01 10:56:10 <drjaska> After enabling UsePAM, 'apk add openssh-server-pam', and 'rc-service sshd restart' later SSH key login works now
2026-10-01 10:56:23 <grawity> because if it accepts remote logins, it's not really a system user
2026-10-01 10:57:02 <drjaska> It isn't meant for a human but a remote system's daemon
2026-10-01 11:10:49 <drjaska> Yeah everything works fine now, cheers, TIL that Alpine has an additional PAM package for openssh-server while Debian and Arch seem to include it by default
2026-10-01 15:11:44 <TuxMiniM1x> help