atzanteol, 1 year ago

Honest question - why would you elevate privs on the bastion?

You can automatically use a bastion host with an SSH config entry as well in case you didn’t know:

<span style="color:#323232;">Host target.example.com
</span><span style="color:#323232;">  User  username
</span><span style="color:#323232;">  ProxyJump username@bastion.example.com
</span>

Then you just ssh target.example.com. Port forwarding is sent through as well.