There is yet a better approach instead, which doesn’t need the SSHd
config to be edited at all:
-1. login to the user on the remote machine
-2. create `/home/.ecryptfs/$USER/.ssh` and put your `authorized_hosts` there
-3. symlink your encrypted version there:
+1. login to the user on the remote machine
+2. create `/home/.ecryptfs/$USER/.ssh` and put your `authorized_hosts` there
+3. symlink your encrypted version there:
- $ ln -s /home/.ecryptfs/$USER/.ssh/authorized_hosts ~/.ssh/authorized_hosts
+ $ ln -s /home/.ecryptfs/$USER/.ssh/authorized_hosts ~/.ssh/authorized_hosts
-4. symlink your unencrypted version there (as above, **make sure** no
- process wants to write to your home directory in the meantime):
+4. symlink your unencrypted version there (as above, **make sure** no
+ process wants to write to your home directory in the meantime):
- $ ecryptf-umount-private
- $ mkdir ~/.ssh
- $ ln -s /home/.ecryptfs/$USER/.ssh/authorized_hosts ~/.ssh/authorized_hosts
- $ ecryptfs-mount-private
+ $ ecryptf-umount-private
+ $ mkdir ~/.ssh
+ $ ln -s /home/.ecryptfs/$USER/.ssh/authorized_hosts ~/.ssh/authorized_hosts
+ $ ecryptfs-mount-private
The paths are for Ubuntu 9.10 (Karmic Koala) and later. On other
systems, you might want to replace `/home/.ecryptfs` with