Warning
Use a sudo-capable account, keep shell history for audit, and back up critical paths before changing boot, SSH, or package state.
What you will achieve
Daily admin work as a named sudo user — leave root SSH login disabled.
1) Create user and set password
sudo adduser adminops2) Add to sudo group (Ubuntu/Debian)
sudo usermod -aG sudo adminops3) Verify sudo access and SSH key setup
su - adminops
sudo -v
mkdir -p ~/.ssh && chmod 700 ~/.ssh