Proxmox LXC ssh port configuration

Status
Not open for further replies.

kcrawford

Renowned Member
Nov 29, 2013
21
2
68
Hello,

I am looking to change the ssh port of a Debian 11 LXC. I have updated the `/etc/ssh/sshd_config` file:


Code:
# grep ^Port /etc/ssh/sshd_config
Port 50022

however after a reboot of the container, the ssh port configuration is no longer respected. When checking the ssh service in the container, it shows as dead.

Code:
# systemctl status ssh
● ssh.service - OpenBSD Secure Shell server
     Loaded: loaded (/lib/systemd/system/ssh.service; enabled; vendor preset: enabled)
     Active: inactive (dead)
       Docs: man:sshd(8)
             man:sshd_config(5)

I have tried building a new container, both privileged and un-privledged; Debian 10 and Debian 11 with all having the same symptom of the ssh service being in a dead state upon logging in.

Has anyone else encountered a similar issue? Below is the container config and the logs from the last boot of a test container.


Code:
# pct config 124
arch: amd64
cores: 1
features: nesting=1
hostname: nginx-test
memory: 512
net0: name=eth0,bridge=vmbr0,firewall=1,hwaddr=2A:DD:5B:3D:08:D5,ip=dhcp,ip6=auto,type=veth
ostype: debian
rootfs: helium:124/vm-124-disk-0.raw,size=8G
swap: 512
unprivileged: 1

Code:
root@nginx-test:~# journalctl -b -l --no-pager
-- Journal begins at Thu 2021-10-28 21:43:10 UTC, ends at Thu 2021-10-28 21:45:09 UTC. --
Oct 28 21:43:10 nginx-test systemd-journald[52]: Journal started
Oct 28 21:43:10 nginx-test systemd-journald[52]: Runtime Journal (/run/log/journal/7984aafeec6a48d59e782eac449b5eb3) is 8.0M, max 2.5G, 2.5G free.
Oct 28 21:43:10 nginx-test systemd-sysusers[59]: Creating group systemd-coredump with gid 999.
Oct 28 21:43:10 nginx-test systemd-sysusers[59]: Creating user systemd-coredump (systemd Core Dumper) with uid 999 and gid 999.
Oct 28 21:43:10 nginx-test systemd[1]: Starting Flush Journal to Persistent Storage...
Oct 28 21:43:10 nginx-test mount[56]: mount: /sys/kernel/config: permission denied.
Oct 28 21:43:10 nginx-test systemd-journald[52]: Time spent on flushing to /var/log/journal/7984aafeec6a48d59e782eac449b5eb3 is 722us for 6 entries.
Oct 28 21:43:10 nginx-test systemd-journald[52]: System Journal (/var/log/journal/7984aafeec6a48d59e782eac449b5eb3) is 8.0M, max 796.3M, 788.3M free.
Oct 28 21:43:10 nginx-test systemd[1]: Finished Flush Journal to Persistent Storage.
Oct 28 21:43:11 nginx-test systemd[1]: Finished Create System Users.
Oct 28 21:43:11 nginx-test systemd[1]: Starting Create Static Device Nodes in /dev...
Oct 28 21:43:11 nginx-test systemd[1]: Finished Create Static Device Nodes in /dev.
Oct 28 21:43:11 nginx-test systemd[1]: Reached target Local File Systems (Pre).
Oct 28 21:43:11 nginx-test systemd[1]: Reached target Local File Systems.
Oct 28 21:43:11 nginx-test systemd[1]: Starting Raise network interfaces...
Oct 28 21:43:11 nginx-test systemd[1]: Condition check resulted in Store a System Token in an EFI Variable being skipped.
Oct 28 21:43:11 nginx-test systemd-journald[52]: Forwarding to syslog missed 1 messages.
Oct 28 21:43:11 nginx-test systemd[1]: Starting Commit a transient machine-id on disk...
Oct 28 21:43:11 nginx-test systemd[1]: Starting Create Volatile Files and Directories...
Oct 28 21:43:11 nginx-test systemd[1]: Condition check resulted in Rule-based Manager for Device Events and Files being skipped.
Oct 28 21:43:11 nginx-test systemd[1]: Starting Network Service...
Oct 28 21:43:11 nginx-test systemd[1]: Finished Create Volatile Files and Directories.
Oct 28 21:43:11 nginx-test systemd[1]: Condition check resulted in Network Time Synchronization being skipped.
Oct 28 21:43:11 nginx-test systemd[1]: Reached target System Time Set.
Oct 28 21:43:11 nginx-test systemd[1]: Reached target System Time Synchronized.
Oct 28 21:43:11 nginx-test systemd[1]: Starting Update UTMP about System Boot/Shutdown...
Oct 28 21:43:11 nginx-test systemd[1]: Finished Update UTMP about System Boot/Shutdown.
Oct 28 21:43:11 nginx-test systemd[1]: Reached target System Initialization.
Oct 28 21:43:11 nginx-test systemd[1]: Started Daily apt download activities.
Oct 28 21:43:11 nginx-test systemd[1]: Started Daily apt upgrade and clean activities.
Oct 28 21:43:11 nginx-test systemd[1]: Started Periodic ext4 Online Metadata Check for All Filesystems.
Oct 28 21:43:11 nginx-test systemd[1]: Condition check resulted in Discard unused blocks once a week being skipped.
Oct 28 21:43:11 nginx-test systemd[1]: Started Daily rotation of log files.
Oct 28 21:43:11 nginx-test systemd[1]: Started Daily man-db regeneration.
Oct 28 21:43:11 nginx-test systemd[1]: Started Daily Cleanup of Temporary Directories.
Oct 28 21:43:11 nginx-test systemd[1]: Reached target Timers.
Oct 28 21:43:11 nginx-test systemd[1]: Listening on D-Bus System Message Bus Socket.
Oct 28 21:43:11 nginx-test systemd[1]: Listening on OpenBSD Secure Shell server socket.
Oct 28 21:43:11 nginx-test systemd[1]: Reached target Sockets.
Oct 28 21:43:11 nginx-test systemd[1]: Reached target Basic System.
Oct 28 21:43:11 nginx-test systemd[1]: Started Regular background program processing daemon.
Oct 28 21:43:11 nginx-test systemd[1]: Started D-Bus System Message Bus.
Oct 28 21:43:11 nginx-test systemd[1]: Starting Remove Stale Online ext4 Metadata Check Snapshots...
Oct 28 21:43:11 nginx-test systemd[1]: Condition check resulted in getty on tty2-tty6 if dbus and logind are not available being skipped.
Oct 28 21:43:11 nginx-test systemd[1]: Starting System Logging Service...
Oct 28 21:43:11 nginx-test systemd[1]: systemd-logind.service: Attaching egress BPF program to cgroup /sys/fs/cgroup/system.slice/systemd-logind.service failed: Invalid argument
Oct 28 21:43:11 nginx-test systemd[1]: Starting User Login Management...
Oct 28 21:43:11 nginx-test rsyslogd[88]: imuxsock: Acquired UNIX socket '/run/systemd/journal/syslog' (fd 3) from systemd.  [v8.2102.0]
Oct 28 21:43:11 nginx-test rsyslogd[88]: imklog: cannot open kernel log (/proc/kmsg): Permission denied.
Oct 28 21:43:11 nginx-test rsyslogd[88]: activation of module imklog failed [v8.2102.0 try https://www.rsyslog.com/e/2145 ]
Oct 28 21:43:11 nginx-test rsyslogd[88]: [origin software="rsyslogd" swVersion="8.2102.0" x-pid="88" x-info="https://www.rsyslog.com"] start
Oct 28 21:43:11 nginx-test systemd[1]: Started System Logging Service.
Oct 28 21:43:11 nginx-test cron[85]: (CRON) INFO (pidfile fd = 3)
Oct 28 21:43:11 nginx-test cron[85]: (CRON) INFO (Running @reboot jobs)
Oct 28 21:43:11 nginx-test systemd-logind[89]: New seat seat0.
Oct 28 21:43:11 nginx-test systemd[1]: Started User Login Management.
Oct 28 21:43:11 nginx-test systemd[1]: Finished Wait for network to be configured by ifupdown.
Oct 28 21:43:11 nginx-test systemd[1]: e2scrub_reap.service: Succeeded.
Oct 28 21:43:11 nginx-test systemd[1]: Finished Remove Stale Online ext4 Metadata Check Snapshots.
Oct 28 21:43:11 nginx-test systemd-networkd[75]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
Oct 28 21:43:11 nginx-test systemd[1]: etc-machine\x2did.mount: Succeeded.
Oct 28 21:43:11 nginx-test systemd[1]: Finished Commit a transient machine-id on disk.
Oct 28 21:43:11 nginx-test systemd-networkd[75]: Enumeration completed
Oct 28 21:43:11 nginx-test systemd[1]: Started Network Service.
Oct 28 21:43:11 nginx-test systemd[1]: Starting Wait for Network to be Configured...
Oct 28 21:43:11 nginx-test systemd[1]: Starting Network Name Resolution...
Oct 28 21:43:11 nginx-test dhclient[105]: Internet Systems Consortium DHCP Client 4.4.1
Oct 28 21:43:11 nginx-test ifup[105]: Internet Systems Consortium DHCP Client 4.4.1
Oct 28 21:43:11 nginx-test dhclient[105]: Copyright 2004-2018 Internet Systems Consortium.
Oct 28 21:43:11 nginx-test ifup[105]: Copyright 2004-2018 Internet Systems Consortium.
Oct 28 21:43:11 nginx-test dhclient[105]: All rights reserved.
Oct 28 21:43:11 nginx-test ifup[105]: All rights reserved.
Oct 28 21:43:11 nginx-test dhclient[105]: For info, please visit https://www.isc.org/software/dhcp/
Oct 28 21:43:11 nginx-test ifup[105]: For info, please visit https://www.isc.org/software/dhcp/
Oct 28 21:43:11 nginx-test dhclient[105]:
Oct 28 21:43:11 nginx-test systemd-networkd[75]: eth0: Link UP
Oct 28 21:43:11 nginx-test systemd-networkd[75]: eth0: Gained carrier
Oct 28 21:43:11 nginx-test systemd-resolved[107]: Positive Trust Anchors:
Oct 28 21:43:11 nginx-test systemd-resolved[107]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
Oct 28 21:43:11 nginx-test systemd-resolved[107]: Negative trust anchors: 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test
Oct 28 21:43:11 nginx-test systemd-resolved[107]: Using system hostname 'nginx-test'.
Oct 28 21:43:11 nginx-test systemd[1]: Started Network Name Resolution.
Oct 28 21:43:11 nginx-test systemd[1]: Reached target Host and Network Name Lookups.
Oct 28 21:43:11 nginx-test dhclient[105]: Listening on LPF/eth0/2a:dd:5b:3d:08:d5
Oct 28 21:43:11 nginx-test ifup[105]: Listening on LPF/eth0/2a:dd:5b:3d:08:d5
Oct 28 21:43:11 nginx-test ifup[105]: Sending on   LPF/eth0/2a:dd:5b:3d:08:d5
Oct 28 21:43:11 nginx-test ifup[105]: Sending on   Socket/fallback
Oct 28 21:43:11 nginx-test ifup[105]: Created duid "\000\001\000\001)\015\325\357*\335[=\010\325".
Oct 28 21:43:11 nginx-test ifup[105]: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 4
Oct 28 21:43:11 nginx-test dhclient[105]: Sending on   LPF/eth0/2a:dd:5b:3d:08:d5
Oct 28 21:43:11 nginx-test dhclient[105]: Sending on   Socket/fallback
Oct 28 21:43:11 nginx-test dhclient[105]: Created duid "\000\001\000\001)\015\325\357*\335[=\010\325".
Oct 28 21:43:11 nginx-test dhclient[105]: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 4
Oct 28 21:43:12 nginx-test dhclient[105]: DHCPOFFER of 192.168.10.66 from 192.168.10.1
Oct 28 21:43:12 nginx-test ifup[105]: DHCPOFFER of 192.168.10.66 from 192.168.10.1
Oct 28 21:43:12 nginx-test ifup[105]: DHCPREQUEST for 192.168.10.66 on eth0 to 255.255.255.255 port 67
Oct 28 21:43:12 nginx-test dhclient[105]: DHCPREQUEST for 192.168.10.66 on eth0 to 255.255.255.255 port 67
Oct 28 21:43:12 nginx-test dhclient[105]: DHCPACK of 192.168.10.66 from 192.168.10.1
Oct 28 21:43:12 nginx-test ifup[105]: DHCPACK of 192.168.10.66 from 192.168.10.1
Oct 28 21:43:12 nginx-test systemd[1]: Finished Wait for Network to be Configured.
Oct 28 21:43:12 nginx-test dhclient[105]: bound to 192.168.10.66 -- renewal in 293 seconds.
Oct 28 21:43:12 nginx-test ifup[105]: bound to 192.168.10.66 -- renewal in 293 seconds.
Oct 28 21:43:12 nginx-test systemd[1]: Finished Raise network interfaces.
Oct 28 21:43:12 nginx-test systemd[1]: Reached target Network.
Oct 28 21:43:12 nginx-test systemd[1]: Reached target Network is Online.
Oct 28 21:43:12 nginx-test systemd[1]: Starting Postfix Mail Transport Agent (instance -)...
Oct 28 21:43:12 nginx-test systemd[1]: Starting Permit User Sessions...
Oct 28 21:43:12 nginx-test systemd[1]: Finished Permit User Sessions.
Oct 28 21:43:12 nginx-test systemd[1]: Started Console Getty.
Oct 28 21:43:12 nginx-test systemd[1]: Condition check resulted in Container Getty on /dev/tty0 being skipped.
Oct 28 21:43:12 nginx-test systemd[1]: Started Container Getty on /dev/tty1.
Oct 28 21:43:12 nginx-test systemd[1]: Started Container Getty on /dev/tty2.
Oct 28 21:43:12 nginx-test systemd[1]: Condition check resulted in Getty on tty1 being skipped.
Oct 28 21:43:12 nginx-test systemd[1]: Reached target Login Prompts.
Oct 28 21:43:12 nginx-test postfix/postfix-script[282]: warning: symlink leaves directory: /etc/postfix/./makedefs.out
Oct 28 21:43:12 nginx-test postfix/postfix-script[315]: starting the Postfix mail system
Oct 28 21:43:12 nginx-test postfix/master[317]: daemon started -- version 3.5.6, configuration /etc/postfix
Oct 28 21:43:12 nginx-test systemd[1]: Started Postfix Mail Transport Agent (instance -).
Oct 28 21:43:12 nginx-test systemd[1]: Starting Postfix Mail Transport Agent...
Oct 28 21:43:12 nginx-test systemd[1]: Finished Postfix Mail Transport Agent.
Oct 28 21:43:12 nginx-test systemd[1]: Reached target Multi-User System.
Oct 28 21:43:12 nginx-test systemd[1]: Reached target Graphical Interface.
Oct 28 21:43:12 nginx-test systemd[1]: Starting Update UTMP about System Runlevel Changes...
Oct 28 21:43:12 nginx-test systemd[1]: systemd-update-utmp-runlevel.service: Succeeded.
Oct 28 21:43:12 nginx-test systemd[1]: Finished Update UTMP about System Runlevel Changes.
Oct 28 21:43:12 nginx-test systemd[1]: Startup finished in 3.493s.
Oct 28 21:43:13 nginx-test systemd-networkd[75]: eth0: Gained IPv6LL
Oct 28 21:45:09 nginx-test systemd-journald[52]: Forwarding to syslog missed 36 messages.
 
Last edited:
Hi,

I tested on Debian 11, everything is working fine here.

Could you please share also the output of pveversion -v
 
please don't double post
 
Status
Not open for further replies.

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!