Ralph Ronnquist wrote on 24/4/19 11:10 am:
>> [snip]
I forgot to include the cluster.ganeti1.devuan.org nodes themselves:

"nash.devuan.org"     (94.23.30.104) evilham jrml katolaz rrq
"napier.devuan.org"   (37.59.56.43) jrml katolaz rrq
"newtonia.devuan.org" (46.105.97.110) centurion jrml katolaz nextime
parazyd rrq

Then root@newtonia has ssh access to root@nash and root@napier, and
root@nash has ssh acces to root@newtonia. Thus, the closure expands any
access as access to all. This "musketeer approach" is not extended to
the VM's.

Ralph.