How to protect information on VDS from a hoster?

Question

System administration

Good afternoon!
Is there a way to protect information on the VDS from the provider, so that their craftsmen would not have the opportunity to get into the database or rewrite my apchas "as it should"?

Answer 1

;) are you sure that the VDS hosting admins will have time to deal with such garbage?

Answer 2

encrypt the storage at home and
copy all the keys for access via SSH to the server yourself

Answer 3

The most accessible option https://wiki.debian.org/ru/Crypt and secure remote connection to the server and the presence of vpn traffic habrahabr.ru/post/251569 , https://www.softether.org/ - this vpn server
in a couple of clicks can mask traffic, also connect via socks or vpn chain

Answer 4

On openvz, no.
On KVM/Xen, it is enough to simply deprive them of access to ssh (delete unnecessary users / disable ssh login for them, change the root password, disable root password authorization).
If possible, encrypt your disk (only works for those hosters where there is an installation from an iso image + permanent vnc access to the machine), if not possible, encrypt directories with private files so that after turning off the machine they cannot see the files.

Answer 5

be sure to keep everything on an encrypted partition and not use any openvz vpski where you can connect to the root without a password to any vps