Question .ssh directory in domain folder?

[uniauto]

Server operating system version

Debian 10.13

Plesk version and microupdate number

18.0.57 #3

Hi.

Yesterday .ssh directory and files id_rsa, id_rsa.pub was created inside all domains folders (/var/www/vhosts/domain.com/.ssh)
it is normal?

 

[Peter Debik]

Yes, that is correct when you allow SSH access for the subscriber.

 

[uniauto]

Yes, that is correct when you allow SSH access for the subscriber.

Hi, thank for answer.
I'm running Plesk Web Admin Edition and didn't change anything about SSH since.... can't remember.
Domain/ftp users have SSH access forbidden since forever.
Maybe .ssh folders and keys was added by any extension? NodeJs, Git, Laravel and Composer was autoinstalled yesterday.

 

[IDIDID]

Hi, thank for answer.
I'm running Plesk Web Admin Edition and didn't change anything about SSH since.... can't remember.
Domain/ftp users have SSH access forbidden since forever.
Maybe .ssh folders and keys was added by any extension? NodeJs, Git, Laravel and Composer was autoinstalled yesterday.

The same here. That directory has appeared on my 3 servers. It has also auto self-installed Git, NodeJs, Laravel and Phusion Passenger server. SSH is forbidden since forever on all subscriptions

 

[Maarten]

This is not something new. I've seen these folders inside subscriptions, too. The .ssh folders were created a year ago.
Have you installed the SSH Terminal extension? That's the only extension with a link to those directories that comes to mind. Or maybe the Git extension?

Maybe one of the developers can clarify this?

 

[IDIDID]

I found where to uninstall Git, Node and Phusion Passenger server. But I haven't found where to uninstall Laravel Toolkit. All this was installed automatically and I don't need it. This installation coincides with the appearance of .ssh folders in subscriptions

Thanks

 

[Maarten]

You can uninstall the Laravel Toolkit just like any other extension:


To prevent extensions from installing, you can add this in the panel.ini extension:

[extensions]
blacklist = sectigo,ssh-terminal,git,laravel,nodejs

Add additional extensions that you don't need or want to be installed.
Use this command to find the correct name of the extension:

# plesk bin extension -l
...

 

[IDIDID]

I have found where to uninstall Laravel Toolkit. I have uninstalled Git, Laravel Toolkit, Node and Phusion Passenger server but the .ssh folders are still there. Can I just delete them?

 

[IDIDID]

You can uninstall the Laravel Toolkit just like any other extension:
View attachment 25042

To prevent extensions from installing, you can add this in the panel.ini extension:

[extensions]
blacklist = sectigo,ssh-terminal,git,laravel,nodejs

Add additional extensions that you don't need or want to be installed.
Use this command to find the correct name of the extension:

# plesk bin extension -l
...

Thanks!

 

[Maarten]

I have found where to uninstall Laravel Toolkit. I have uninstalled Git, Laravel Toolkit, Node and Phusion Passenger server but the .ssh folders are still there. Can I just delete them?

I still don't know why those .ssh folders were created, so I'm not sure if something depends on it.

@Peter Debik or @AYamshanov, do you know where these .ssh folders come from?

 

[mow]

Yes, that is correct when you allow SSH access for the subscriber.

For access it wouldn't need id_rsa*, though. Only authorized_keys, if at all.

 

[AYamshanov]

[...] I have uninstalled Git [...]

@Peter Debik or @AYamshanov, do you know where these .ssh folders come from?

I think it at least could come from the Git extension, here is an quick example (please ignore the fact of the error, it is just to show the process/steps),

When you add a repository for the first time, the extension generates ssh-pair, private and public keys,

---

I have tried to add git-repository through a link to git ([email protected]:plesk/ext-advisor-integration-example) and the first step is adding its public key into the list of known hosts inside the .ssh directory,

---

Finally, in the .ssh directory I can see 3 files,

1. git_known_hosts, it contains a public key for git repository,
2. id_rsa, it contains a private key for the Git extension on that domain,
3. id_rsa.pub, it contains a public key for the Git extension on that domain.