SSH server

[str4ng3r]

Hi.

Is there any SSH server for piCore in the repo?

Thanks.

[sbp]

Hi

I use the Dropbear.tcz on my piCore - it is working fine.

[str4ng3r]

Hi

I use the Dropbear.tcz on my piCore - it is working fine.

Should i get openssl also? Or is there some "magic" i need to do before login?
I'm asking because just downloaded it, rebooted Pi and tried access it from putty with no luck.

[sbp]

no, you don't need more. You just need to follow these instructions:

install Dropbear.
make a password for tc like this:
passwd 


Then I added these three lines to opt/.filetool.lst
etc/passwd
etc/shadow
etc/dropbear

next I used backup:
filetool.sh -b

Then reboot.

Now I start dropbear by:
sudo /usr/local/etc/init.d/dropbear start     

and everything is fine I can connect via Putty by user: tc and password: (the one I supplied).

For Dropbear to start automatically add:
usr/local/etc/init.d/dropbear start to /opt/bootlocal.sh

And then do a backup to make it persistent
filetool.sh -b
 

[bmarkus]

Hi

instructions are good, few notes however:

No need to backup

/etc/shadow

No such directory as /etc/dropbear no need to add to backup.

Add

/usr/local/etc/dropbear/dropbear_dss_hostkey
/usr/local/etc/dropbear/dropbear_rsa_hostkey

to backup to save generated keys over reboot.

I find more convenient to have a new user defined, 'ru' with password and part of sudoers. In this case you can keep tc without password. With new user(s) add

/etc/sudoers
/etc/group

to backup.

[Rich]

Hi bmarkus
I was under the impression (maybe incorrectly) that the Pi extensions would follow the same file layout as the
X86 versions. The X86 version of dropbear does have a  /etc/dropbear/  entry.

[sbp]

Thanks

I'm learning all the time.

Steen

[althalus]

Hi

instructions are good, few notes however:

No need to backup

/etc/shadow

Are you sure? Password changes are stored in /etc/shadow, are they not? (Possibly displaying my ignorance of core on Pi, or passwords in core, but this has been my experience with almost every other distro...)

[bmarkus]

Hi

instructions are good, few notes however:

No need to backup

/etc/shadow

Are you sure? Password changes are stored in /etc/shadow, are they not? (Possibly displaying my ignorance of core on Pi, or passwords in core, but this has been my experience with almost every other distro...)

In fact, nothing wrong saving shadow but in fact not needed to have proper operation of SSH.

[bmarkus]

Hi bmarkus
I was under the impression (maybe incorrectly) that the Pi extensions would follow the same file layout as the
X86 versions. The X86 version of dropbear does have a  /etc/dropbear/  entry.

piCore is following as much as possible x86 version but at the same time follows generic Core rules. dropbear is an extension, therefore it is using /usr/local/etc and not /etc used by system itself.

[tinypoodle]

Makes all sense to me, given the fact that dropbear was for a long time an integral part of x86 base and eventually got outfactured to an extension before any ports to other arches were in sight.

[coreplayer2]

Have never used dropbear before so I thought I'd check it out,  but am quite confused over where the hostkeys install too.

After reading the above notes even though this is an x86 version I was expecting to find the files to backup here

/usr/local/etc/dropbear/dropbear_dss_hostkey
/usr/local/etc/dropbear/dropbear_rsa_hostkey

instead I found them installed to

/etc/dropbear/dropbear_dss_hostkey
/etc/dropbear/dropbear_rsa_hostkey

presumably we backup theses, right??

[bmarkus]

As explained above, x86 is using /etc while piCore /usr/local/etc

[curaga]

What do you mean with /etc/shadow is not needed? Surely picore does not use DES passwords?

[bmarkus]

What do you mean with /etc/shadow is not needed? Surely picore does not use DES passwords?

Hm... Interesting...

I'm using an SSH setup created several month ago with a user 'mb'. It's encrypted password is in /etc/passwd and user is not in /etc/shadow

Created a new user now, its encrypted password stored in /etc/shadow

So reviewing my previous notes, please backup /etc/shadow .