Wolkra

Connect with SSH

Updated

To connect, run ssh root@<server-ip> with the SSH key you selected when creating the server, or with the root password sent to your email. If SSH is not reachable, use the browser console or rescue mode from the server view in the console.

Find the address

Open the server in the console. The overview shows its public IPv4 (if it has one) and IPv6 address. Servers on a private network only have private addresses; see the section on servers without a public IP below.

Connect from Linux or macOS

ssh [email protected]          # example IPv4
ssh root@2001:db8::10          # example IPv6

If your key is not the default ~/.ssh/id_ed25519, name it:

ssh -i ~/.ssh/wolkra_ed25519 [email protected]

On the first connection, confirm the host fingerprint with yes.

Connect from Windows

Windows 10 and 11 include OpenSSH. In PowerShell:

ssh [email protected]

With PuTTY, enter the address as Host Name, load your .ppk key under Connection → SSH → Auth → Credentials, and log in as root.

With a root password

If you selected no SSH key, the root password arrives by email. Log in, then change it straight away:

passwd

Better still, add your key and turn off password login. The SSH keys guide shows how.

Save a shortcut

Add the server to ~/.ssh/config:

Host web-1
  HostName 203.0.113.10
  User root
  IdentityFile ~/.ssh/id_ed25519

Now ssh web-1 is enough.

Reach servers without a public IP

Servers that live only on a private network have no public address. Connect through a server that has one, a so-called jump host:

ssh -J [email protected] [email protected]     # example addresses

Or in ~/.ssh/config:

Host db-1
  HostName 10.0.0.5
  User root
  ProxyJump web-1

A WireGuard VPN into the private network is another good option for teams.

Browser console

Open the server and choose Console. It shows the server's screen, as if a monitor were attached, and works even when the network or SSH is broken. Log in with a user that has a password. If root has only a key, set a password first while you still have SSH access:

passwd

Use the console to fix a firewall rule, an SSH config error or a network setting.

Rescue mode

If the system no longer boots, choose Rescue in the server view. The server restarts into a small rescue system. Log in as instructed in the console, then mount your disk and repair it:

lsblk                       # find the system disk and its partitions
mount /dev/vda1 /mnt        # device names vary, check lsblk first

When done, unmount, leave rescue mode and reboot normally.

Troubleshooting

Symptom What to check
Connection timed out Server running? Port 22 allowed in UFW and in the firewall? Correct IP?
Connection refused SSH service stopped or on another port: check in the console with systemctl status ssh
Permission denied (publickey) Right user and key? Permissions 700 on ~/.ssh and 600 on authorized_keys?
REMOTE HOST IDENTIFICATION HAS CHANGED The server was rebuilt: ssh-keygen -R 203.0.113.10

Run ssh -v for a detailed log. Still stuck? Open a ticket in the console.

Next: harden the server with how to secure an Ubuntu server.

Frequently asked questions

What username do I use?

root for a new server. On one-click apps the same applies unless the app's notes say otherwise. Create your own sudo user afterwards.

I chose no SSH key. How do I log in?

A root password is sent to your email. Log in with it, change it with passwd and then add a key.

SSH says permission denied. What now?

Check the user, the key and the IP. If it still fails, open the browser console from the server view and check ~/.ssh/authorized_keys and the SSH config.

Can I add a key to an existing server from the console?

Saved keys are added when a server is created. For a running server, add the public key to ~/.ssh/authorized_keys yourself, for example through the browser console.