This repository has no description
AGENTS.md: ssh in as root, never sudo on remote systems
author
lassulus
date
(Oct 9, 2026, 8:03 PM CEST)
commit
86bd3a39
86bd3a39ce1f944cbb883386dbc8208738b4ebef
parent
e8122494
e8122494128da8391063c655bbedfe4e3511f01b
+12
-5
+12
-5
AGENTS.md
+12
-5
AGENTS.md
···
51
51
# Deploy/rebuild Darwin configuration (for barnacle)
52
52
sudo darwin-rebuild switch --flake .#barnacle
53
53
54
-
# Access machines via SSH
55
-
ssh <machine-name>.r # via retiolum
56
-
ssh <machine-name>.s # via spora
57
-
ssh <machine-name>.n # via nether
58
-
torify ssh $(pass show machines/<machine-name>/tor-hostname) # via tor
54
+
# Access machines via SSH (as root, see below)
55
+
ssh root@<machine-name>.r # via retiolum
56
+
ssh root@<machine-name>.s # via spora
57
+
ssh root@<machine-name>.n # via nether
58
+
torify ssh root@$(pass show machines/<machine-name>/tor-hostname) # via tor
59
59
```
60
+
61
+
## Remote Machine Access
62
+
63
+
**CRITICAL**: For privileged work on a remote machine (firewall rules,
64
+
journals of system services, systemctl, reading /run/secrets, ...), ssh in as
65
+
root (`ssh root@<machine>.r`). NEVER use `sudo` on remote systems. Ssh as the
66
+
normal user (`lass@`) only to act as that user, e.g. to run user tools.
60
67
61
68
## Important: Git Staging for Flake Evaluation
62
69