Re: Digital Ocean ssh key authentication security risk — password authentication is re-enabled

Posted by gp on Jan 30

Hello,

The last time I contacted them they did not care about this. It’s
basically a feature. They also used to (or still do) reset SSH host keys
and other things.

A suggested workaround if I remember correctly was to set a sticky bit
on the files you did not want their bootstrap script to modify. I have
no idea if this works or if it makes sense as I worked around the
problem another way.

Have you tried reaching support about it? I…