Destination Linux 159: Emma Marshall, Linux 5.5, Solus, Open eBook Reader, Anbox Cloud, & More

[esbeeb]

Back in December, I mentioned some tips and pointers on how to hide an SSH server’s world-accessible port inside a Wireguard tunnel (so that without an established Wireguard tunnel, the SSH server can’t be remotely accessed):

So, what's your Linux week been like?

After contemplating how I would add 2FA to SSH login, as simply as possible, here’s what I came up with: I have a couple of VPS’, and I was able to hide their world-accessible ssh ports inside a Wireguard tunnel (on each). So now there is no way to log into those VPS’, except by way of first establishing a Wireguard connection. Why would I do this? Wireguard acts the second factor of authentication I was wanting; as in, Wireguard is my own poor-man’s 2FA for SSH. To limit SSH’s access to th…