This guide explains how to install the VyOS Rolling Release (free nightly builds) on Hetzner Cloud VPS. This might also work for other VPS providers with the proper rescue system in place.
First log into Hetzner Cloud, switch to your VPS control panel, select Rescue -> Enable Rescue and Power Cycle. It takes up to 1 minute to boot into rescue mode. Your login details will be displayed in the control panel after you activate the console. You can also use previously defined SSH keys.
Download and write the ISO image in the Rescue environment:
wipefs -a /dev/sda
wget https://github.com/vyos/vyos-rolling-nightly-builds/releases/download/1.5-rolling-202401170024/vyos-1.5-rolling-202401170024-amd64.iso
dd if=vyos-1.5-rolling-202401170024-amd64.iso of=/dev/sda
reboot
Before you boot VyOS, while in GRUB, press TAB and add a space and toram option to the cmdline, then hit enter. This option lets the system to boot into RAM. Without it, the installation will fail.
Default credentials:
- User:
vyos - Pass:
vyos
install image
Next, next, next:
Would you like to continue?: y
What would you like to name ths image?: enter
Please enter a password for the "vyos" user: password
What console should be used by default?: KVM (K)
Which one should be used for installation?: /dev/sda
Installation will delete all data on the drive. Continue?: y
The last one asks you if you want to use the entire space. It's up to you, (but in the end) it doesn't even really matter.
Once the installation is done, you can reboot.
reboot
configure
set interfaces ethernet eth0 address dhcp
set service ssh access-control allow user vyos
set service ssh port 22
set service ssh listen-address 0.0.0.0
commit
save
exit
restart ssh
Now you can connect to your VyOS using SSH and continue the installation.
Enable key-based authentication:
configure
set system login user vyos authentication public-keys <identifier> key <ssh_key>
set system login user vyos authentication public-keys <identifier> type <ssh_type>
commit
save
exit
exit
Now you should be able to log in using your SSH key.
If you succeed, disable password-based authentication:
configure
set service ssh disable-password-authentication
commit
save
exit
Keep in mind that it's just a very basic setup. Make sure to properly secure and harden your configuration.
If you found this article helpful, please consider making a donation to a charity on my behalf. Thank you.
Works on OVH VPS too, with the one exception that in their rescue mode sda is the rootfs of the rescue system so you need to
wipefsandddto /dev/sdb instead.