OpenSSH Install - Revision history

Pcworld: since this page is deprecated, redirecting to Application:OpenSSH

2011-07-25T13:08:12Z

since this page is deprecated, redirecting to Application:OpenSSH

RodWhitby at 21:59, 12 July 2011

2011-07-12T21:59:46Z

RodWhitby: /* Once you are able to ssh in, disable dev mode. */

2011-04-06T22:26:34Z

Once you are able to ssh in, disable dev mode.

Papa4narchia: /* Reboot your device */

2010-09-25T10:19:01Z

Reboot your device

Papa4narchia: /* Mount the file system as readwrite */

2010-09-25T10:18:01Z

Mount the file system as readwrite

Papa4narchia at 10:16, 25 September 2010

2010-09-25T10:16:03Z

Papa4narchia at 10:13, 25 September 2010

2010-09-25T10:13:22Z

Papa4narchia at 09:56, 25 September 2010

2010-09-25T09:56:41Z

Hopspitfire: New page: ==Install OpenSSH:==

 ipkg-opt install openssh

Note that the default configuration of OpenSSH does '''not''' enable SFTP. Since SCP just uses basic SSH, that ...

2009-07-21T23:34:10Z

New page: ==Install OpenSSH:== <pre><nowiki> ipkg-opt install openssh </nowiki></pre> Note that the default configuration of OpenSSH does '''not''' enable SFTP. Since SCP just uses basic SSH, that ...

New page

==Install OpenSSH:==
<pre><nowiki>
ipkg-opt install openssh
</nowiki></pre>
Note that the default configuration of OpenSSH does '''not''' enable SFTP. Since SCP just uses basic SSH, that works.

==Kill the OpenSSH daemon automatically started by ipkg:==
<pre><nowiki>
killall sshd
</nowiki></pre>

==Install an upstart event for the OpenSSH daemon.==
<pre><nowiki>
cd /etc/event.d/
wget http://gitorious.org/webos-internals/bootstrap/blobs/raw/master/etc/event.d/optware-openssh
</nowiki></pre>

==[Optional] If you want to connect to the pre over EVDO as well as over wifi, do this step.==
Generally, most seem to think that's a bad idea.
Take a look at the script. Notice that it automatically modifies the firewalls rules to enable incoming SSH on port 222 over WiFI (interface eth0) connections only. Follow the directions in the script to enable SSH on all interfaces (including your EVDO interface) if you wish.

Look at the code for openssh
<pre><nowiki>
cat optware-openssh
</nowiki></pre>

==Start the OpenSSH daemon for testing:==
<pre><nowiki>
initctl start optware-openssh
</nowiki></pre>

==Obtain the IP address of your Pre. Look for the "inet addr://Your.IP.Address//"==
to get the ip address for your WIFI connection:
<pre><nowiki>
ifconfig eth0
</nowiki></pre>

to get the ip address for your evdo connection:
<pre><nowiki>
ifconfig ppp0
</nowiki></pre>

==Test your SSH installation. ==
'''DO NOT CLOSE YOUR TELNET SESSION YET. DO THIS IN A NEW WINDOW ''' From a remote system SSH to your Pre using //your// username and port 222. For example, from a Linux desktop you would run.
<pre><nowiki>
ssh -p 222 PRE-USERNAME@YOUR-PRE-IP-ADDR
</nowiki></pre>
From a Windows desktop we recommend using [http://www.chiark.greenend.org.uk/~sgtatham/putty/ PuTTY].

Logout when done with "exit".

==Remount the file system as readonly:==
<pre><nowiki>
mount -o remount,ro /
</nowiki></pre>

==Reboot your device==
reboot
Confirm that you can still access it after it boots using SSH.

==Once you are able to ssh in, disable dev mode.==
Dev Mode enabled opens the firewall up -- not a safe position to be in. Unless you mess up and NEED to telnet or novacom in again, keep dev mode off.

= Return to the [[Next_steps | Next Steps ]] page.=

= Credits:=
* Upstart Dropbear script and general cleanup from [http://blogs.gurulabs.com/dax/ Dax Kelson]
* Sudo recipe from greg963 at Precentral.net
* Original SSH process is based on dreadchicken's work
* Sargun for the original Telnet process
* zinge for validation of the process

= See also=
* http://www.nslu2-linux.org/wiki/Optware/HomePage
* [[optware-cross-compilation | Optware Cross Compilation]]

← Older revision		Revision as of 13:08, 25 July 2011
Line 1:		Line 1:
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~	+	#REDIRECT [[Application:OpenSSH]]
−
−	~~Just install the OpenSSH package directly in Preware, and follow the instructions in the HomePage link in the package description in Preware.~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	~~==Install OpenSSH==~~
−	~~<pre><nowiki>~~
−	~~ipkg-opt install openssh~~
−	~~</nowiki></pre>~~
−	~~Note that the default configuration of OpenSSH does '''not''' enable SFTP. Since SCP just uses basic SSH, that works.~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	~~==Kill the OpenSSH daemon automatically started by ipkg==~~
−	~~<pre><nowiki>~~
−	~~killall sshd~~
−	~~</nowiki></pre>~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	~~==Mount the file system as readwrite==~~
−	~~If your root filesystem is still mounted readonly, you will not be able to write for example to /etc/conf.d, which we'll be doing in the next step.~~
−	~~<pre><nowiki>~~
−	~~mount -o remount,rw /~~
−	~~</nowiki></pre>~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	~~==Install an upstart event for the OpenSSH daemon==~~
−	~~<pre><nowiki>~~
−	~~cd /etc/event.d/~~
−	~~wget http://gitorious.org/webos-internals/bootstrap/blobs/raw/master/etc/event.d/optware-openssh~~
−	~~</nowiki></pre>~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	==[~~Optional step] Connecting to your pre over 3G (EVDO, UMTS) or WiFi==~~
−	~~Generally, most seem to think that's a bad idea.~~
−	Take a look at the script /etc/event.d/optware-openssh. Notice that it automatically modifies the firewalls rules to enable incoming SSH on port 222 over WiFi (interface eth0) connections only. Follow the directions in the script to enable SSH on all interfaces (including your 3G interface), if you wish.
−
−	~~Look at the script starting openssh:~~
−	~~<pre><nowiki>cat /etc/event.d/optware-openssh</nowiki></pre>~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE~~: ~~This page is obsolete.~~
−
−	~~==Start the~~ OpenSSH ~~daemon for testing==~~
−	~~<pre><nowiki>~~
−	~~initctl start optware-openssh~~
−	~~</nowiki></pre>~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	~~==Obtain the IP address of your Pre==~~
−	~~Look for the "inet addr://Your.IP.Address//" to get the ip address for your WIFI connection:~~
−	~~<pre><nowiki>~~
−	~~ifconfig eth0~~
−	~~</nowiki></pre>~~
−
−	~~To get the ip address for your 3G (EVDO, UMTS) connection:~~
−	~~<pre><nowiki>~~
−	~~ifconfig ppp0~~
−	~~</nowiki></pre>~~
−
−	~~Alternatively, you can install the Preware application "What is my IP?" for a convenient GUI to lookup IPs on all your interfaces.~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	~~==Test your SSH installation==~~
−	~~'''DO NOT CLOSE YOUR TELNET SESSION YET. DO THIS IN A NEW WINDOW ''' From a remote system SSH to your Pre using //your// username and port 222. For example, from a Linux desktop you would run.~~
−	~~<pre><nowiki>~~
−	~~ssh -p 222 PRE-USERNAME@YOUR-PRE-IP-ADDR~~
−	~~</nowiki></pre>~~
−	~~From a Windows desktop we recommend using [http://www.chiark.greenend.org.uk/~sgtatham/putty/ PuTTY].~~
−
−	~~Logout when done with "exit".~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	~~==Remount the file system as readonly==~~
−	~~<pre><nowiki>~~
−	~~mount -o remount,ro /~~
−	~~</nowiki></pre>~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	~~==Reboot your device==~~
−	~~<pre><nowiki>~~
−	~~reboot~~
−	~~</nowiki></pre>~~
−
−	~~Confirm that you can still access it after it boots using SSH.~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	~~==Optionally disable dev mode.==~~
−	~~You may choose to disable dev mode at this point. There is no security issue to leaving dev mode on.~~
−
−	~~= Return to the [[Next_steps \| Next Steps ]] page.=~~
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	~~= Credits:=~~
−	* Upstart Dropbear script and general cleanup from [http://blogs.gurulabs.com/dax/ Dax Kelson]
−	* Sudo recipe from greg963 at Precentral.net
−	* Original SSH process is based on dreadchicken's work
−	* Sargun for the original Telnet process
−	* zinge for validation of the process
−
−	~~OBSOLETE OBSOLETE OBSOLETE: This page is obsolete.~~
−
−	~~= See also=~~
−	* http://www.nslu2-linux.org/wiki/Optware/HomePage
−	* [[optware-cross-compilation \| Optware Cross Compilation]]

@@ Line 1: / Line 1: @@
 ==Install OpenSSH==
 <pre><nowiki>
@@ Line 4: / Line 10: @@
 </nowiki></pre>
 Note that the default configuration of OpenSSH does '''not''' enable SFTP.  Since SCP just uses basic SSH, that works.
 ==Kill the OpenSSH daemon automatically started by ipkg==
@@ Line 9: / Line 17: @@
 killall sshd
 </nowiki></pre>
 ==Mount the file system as readwrite==
@@ Line 15: / Line 25: @@
 mount -o remount,rw /
 </nowiki></pre>
 ==Install an upstart event for the OpenSSH daemon==
@@ Line 21: / Line 33: @@
 wget http://gitorious.org/webos-internals/bootstrap/blobs/raw/master/etc/event.d/optware-openssh
 </nowiki></pre>
 ==[Optional step]  Connecting to your pre over 3G (EVDO, UMTS) or WiFi==
@@ Line 28: / Line 42: @@
 Look at the script starting openssh:
 <pre><nowiki>cat /etc/event.d/optware-openssh</nowiki></pre>
 ==Start the OpenSSH daemon for testing==
@@ Line 33: / Line 49: @@
 initctl start optware-openssh
 </nowiki></pre>
 ==Obtain the IP address of your Pre==
@@ Line 46: / Line 64: @@
 Alternatively, you can install the Preware application "What is my IP?" for a convenient GUI to lookup IPs on all your interfaces.
 ==Test your SSH installation==
 '''DO NOT CLOSE YOUR TELNET SESSION YET.  DO THIS IN A NEW WINDOW ''' From a remote system SSH to your Pre using //your// username and port 222. For example, from a Linux desktop you would run.
@@ Line 54: / Line 75: @@
 Logout when done with "exit".
 ==Remount the file system as readonly==
@@ Line 59: / Line 82: @@
 mount -o remount,ro /
 </nowiki></pre>
 ==Reboot your device==
@@ Line 66: / Line 91: @@
 Confirm that you can still access it after it boots using SSH.
 ==Optionally disable dev mode.==
@@ Line 71: / Line 98: @@
 = Return to the [[Next_steps | Next Steps ]] page.=
 = Credits:=
@@ Line 78: / Line 107: @@
 * Sargun for the original Telnet process
 * zinge for validation of the process
 = See also=
 * http://www.nslu2-linux.org/wiki/Optware/HomePage
 * [[optware-cross-compilation | Optware Cross Compilation]]

@@ Line 11: / Line 11: @@
 ==Mount the file system as readwrite==
 <pre><nowiki>
 mount -o remount,rw /

@@ Line 67: / Line 67: @@
 Confirm that you can still access it after it boots using SSH.
-==Once you are able to ssh in, disable dev mode.==
+==Optionally disable dev mode.==
-Dev Mode enabled opens the firewall up -- not a safe position to be in.  Unless you mess up and NEED to telnet or novacom in again, keep dev mode off.
+You may choose to disable dev mode at this point.  There is no security issue to leaving dev mode on.
 = Return to the [[Next_steps | Next Steps ]] page.=

@@ Line 16: / Line 16: @@
 </nowiki></pre>
-==[Optional]  If you want to connect to the pre over EVDO as well as over wifi, do this step.==
+==[Optional]  If you want to connect to the pre over 3G (EVDO, UMTS) as well as over wifi, do this step.==
 Generally, most seem to think that's a bad idea.
-Take a look at the script. Notice that it automatically modifies the firewalls rules to enable incoming SSH on port 222 over WiFI (interface eth0) connections only. Follow the directions in the script to enable SSH on all interfaces (including your EVDO interface) if you wish.
+Take a look at the script /etc/event.d/optware-openssh. Notice that it automatically modifies the firewalls rules to enable incoming SSH on port 222 over WiFi (interface eth0) connections only. Follow the directions in the script to enable SSH on all interfaces (including your 3G interface), if you wish.
- Look at the code for openssh
+Look at the script starting openssh:
-<pre><nowiki>
+<pre><nowiki>cat /etc/event.d/optware-openssh</nowiki></pre>
 ==Start the OpenSSH daemon for testing:==
@@ Line 41: / Line 39: @@
 </nowiki></pre>
+Alternatively, you can install the Preware application "What is my IP?" for a convenient GUI to lookup IPs on all your interfaces.
 ==Test your SSH installation.  ==
 '''DO NOT CLOSE YOUR TELNET SESSION YET.  DO THIS IN A NEW WINDOW ''' From a remote system SSH to your Pre using //your// username and port 222. For example, from a Linux desktop you would run.