By james744293
Hiya,
I recently created a FreeBSD droplet.
Does anyone know why there is a ‘freebsd’ user by default on DO droplets, as well as the root user?
I’d like to just remove the freebsd user to get a more standard setup. Is there any reason I wouldn’t want to do this?
Many thanks!
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Only the folks who created the image can answer for sure why they did that, but I suspect it’s because FreeBSD doesn’t allow ssh access as the root user by default. Using a different user rather than allowing root ssh access avoids accusations of insecurity (warranted or not). Also, using a non-root user is more like how other cloud hosting providers (at least AWS) do it, in my experience, and how some DO droplets are configured by default, I think, so might not be considered entirely unexpected.
Best not to alway do things as root, plus there are tons of attacks for root@yourserver if you have ssh running.
Side note, FreeBSD has a secret root account names toor. Take a look at here for more info.
Not sure if this feature is available on DO’s version of FreeBSD.
I don’t think there is any need to remove freebsd user. This setup is reliable. You have your system ssh keys shared on your server, that lets you to have have password less ssh access to your server. and then use sudo to elevate the privileges. Also in FreeBSD ssh login as root is disabled. It is good that way for security reason. In any *NIX environment, using root account for login should be avoided as far as possible.
But if you still do not want to login with the freebsd user. create another user in your server. assign a strong password… add him to the wheel group… and you are ready… login and check… after that you may delete the freebsd user account.
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
Full documentation for every DigitalOcean product.
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
Stay up to date by signing up for DigitalOcean’s Infrastructure as a Newsletter.
New accounts only. By submitting your email you agree to our Privacy Policy
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.