Setting up optware feed - Revision history

RodWhitby at 08:02, 16 August 2010

2010-08-16T08:02:08Z

Hopspitfire: root -> accessing linux

2009-07-28T23:21:51Z

root -> accessing linux

SagaciousB: Fixed links & header.

2009-07-22T02:06:50Z

Fixed links & header.

Hopspitfire at 17:40, 20 July 2009

2009-07-20T17:40:52Z

Hopspitfire at 15:45, 20 July 2009

2009-07-20T15:45:10Z

Markstubb: /* Install a secure method to connect to the Pre */

2009-07-20T15:28:41Z

Install a secure method to connect to the Pre

Markstubb: /* Install a secure method to connect to the Pre */

2009-07-20T15:26:47Z

Install a secure method to connect to the Pre

Hopspitfire: Initial porting

2009-07-20T03:16:00Z

Initial porting

New page

After you have gained initial root access to the Pre, you will want to install a secure access mechanism for use in the future. There are several steps you should take immediately:

* Install the Optware package manager so that you can install software onto the Pre. The Optware package feed gives access to over 1300 prebuilt command-line packages for the Pre, and does so without causing conflicts with the built-in Palm package manager.
* Create a new username and password so that you don't need to connect to the Pre as root. This provides an extra layer of security for your Pre. Our secure access mechanism by default does not allow direct root password login (however you can log in as root using secure ssh access keys).
* Configure a secure firewall so that your Pre is not open to everyone in the universe, but can still be accessed securely by you. **If you do not secure the network, your device will be accessible by anyone on the internet until it is rebooted.**

Note: If you are using the Palm Emulator you don't need to follow these steps to get ssh installed. The emulator is already running a ssh server (dropbear) on that you can connect to on localhost 5522. The optware/cs08q1armel feed is built for the ARM arch, but the emulator is actually a build of the palm pre software for x86, and optware/i686g25 is the correct feed (replace cs08q1armel with i686g25 for emulator).

* YOU MUST FOLLOW ALL STEPS ON THIS PAGE EXACTLY AS WRITTEN.
* ANY DEVIATION WILL CAUSE PROBLEMS.
* IF YOU DO NOT FOLLOW THEM EXACTLY, YOU GIVE UP ALL HOPE OF ANYONE HELPING YOU.

This page assumes that you have just finished the procedure on the [[Portal:Accessing_Linux | Accessing Linux]] page, and are still logged in as root via telnet, novaterm, or novaproxy.

'''If you have never used Linux before please look at [[basic-linux-use | Basic Linux Use]] to get an idea of linux usage before proceeding.'''

= Setting up ipkg-opt to access the Optware package feed=

ipkg-opt is a self contained version of ipkg that only touches files under /opt, which means it will not interfere with the built-in ipkg from Palm. We want to do this to avoid potential issues with Palm's update process.

==* Procedure==

===* 1. Make the root filesystem writeable, so that we may make some minimal changes to it:===
<pre><nowiki>
rootfs_open -w
</nowiki></pre>

===* 2. Create a place to put Optware's ipkg.===
This step has been split into two different ways. You can do the simple method (easier, safer, recommended) in 2a or the advanced way (not recommended for faint of heart and may break when Palm does an OTA upgrade) in 2b.

====* 2a. Create your new opt directory in /var, and arrange for it to be mounted at boot:====
<pre><nowiki>
mkdir /var/opt
mkdir /opt
mount -o bind /var/opt /opt
echo '/var/opt /opt bind defaults,bind 0 0' >>/etc/fstab
</nowiki></pre>

====* 2b. Alternatively, you can resize an existing LVM volume and create a new one specifically for the new packages. See [[[alt-optmedia]]] for this alternative method.====

===* 3. Get the ipkg-opt package from the Optware package feed:===
<pre><nowiki>
cd /tmp
wget http://ipkg.nslu2-linux.org/feeds/optware/cs08q1armel/cross/unstable/ipkg-opt_0.99.163-10_arm.ipk
</nowiki></pre>

Note: If the above step is failing with a "wget: bad address" error and you are on a mac, you made a mistake by selecting USB on step 8 of the [http://predev.wikidot.com/osx-rooting OS X Rooting via USB cable] page. To recover: on your mac, eject the pre drive, then unplug the USB cable and plug it back in. Don't select anyting (or select "Just Charge" if not selecting anything really bothers you). Now repeat step 3 above.

===* 4. Manually unpack the package (do *not* use the built-in ipkg command for this):===
<pre><nowiki>
mkdir /tmp/ipkg
cd /tmp/ipkg
tar xvzf ../ipkg-opt_0.99.163-10_arm.ipk
</nowiki></pre>

===* 5. Unpack the contents of data.tar.gz into your /opt directory, starting at the root directory (the filenames in data.tar.gz start with ./opt/...):===
<pre><nowiki>
cd /
tar xvzf /tmp/ipkg/data.tar.gz
</nowiki></pre>

===* 6. Clean up the files we temporarily placed in /tmp:===
<pre><nowiki>
rm /tmp/ipkg-opt_0.99.163-10_arm.ipk
rm -rf /tmp/ipkg
</nowiki></pre>

===* 7. Configure the Optware feeds:===
Please note that the second line has one '''>''' while the third and fourth lines have two.
<pre><nowiki>
mkdir -p /opt/etc/ipkg
echo "src/gz cross http://ipkg.nslu2-linux.org/feeds/optware/cs08q1armel/cross/unstable" > /opt/etc/ipkg/optware.conf
echo "src/gz native http://ipkg.nslu2-linux.org/feeds/optware/cs08q1armel/native/unstable" >> /opt/etc/ipkg/optware.conf
echo "src/gz kernel http://ipkg.nslu2-linux.org/feeds/optware/pre/cross/unstable" >> /opt/etc/ipkg/optware.conf
</nowiki></pre>

===* 8. For the root shell session that you're using ipkg-opt, add /opt/bin to the front of your PATH===
<pre><nowiki>
export PATH=/opt/bin:$PATH
</nowiki></pre>

===* 9. Update the Optware package database:===
<pre><nowiki>
ipkg-opt update
</nowiki></pre>

===* 10. Arrange for /opt/bin and /opt/sbin (when root) to be on your $PATH===

<pre><nowiki>
mkdir /etc/profile.d/
cd /etc/profile.d/
wget http://gitorious.org/webos-internals/bootstrap/blobs/raw/master/etc/profile.d/optware
</nowiki></pre>

= Create an unprivileged user account to be used when logging in:=

In the code below, change "preuser" to your prefered login name. You will be creating a variable called "MYUSER" in the first line. From that point on do _not_ type your username, type $MYUSER as it says in the code blocks.

<pre><nowiki>
export MYUSER=preuser # You should change "preuser" to something else (your preferred username)...
adduser -h /var/home/$MYUSER $MYUSER # You'll be asked to set your password here.
</nowiki></pre>

If the Pre complains that your password is weak, then you should really use a more secure password. If you specifically wish to have weak password, just repeat it to confirm and it will take it. It does not reject weak passwords, it just warns about them. Remember that your Pre will contain your personal information, so you really do want a strong secure password.

== Enable a method for your new unprivileged user account to gain root privileges.==
Install the sudo package and then configure sudo to allow your newly created user to run commands as the root user. This method of running commands with root privileges has been made popular by [http://www.ubuntu.com/ Ubuntu].

<pre><nowiki>
# install portion
ipkg-opt install sudo
# configure portion
chmod 640 /opt/etc/sudoers
echo "$MYUSER ALL=(ALL) ALL" >> /opt/etc/sudoers
chmod 440 /opt/etc/sudoers
</nowiki></pre>

Now to run commands with root privileges when logged in as you new unprivileged user, simply run sudo the_command. When prompted for a password, enter the password for ''your new user''.

= Install a secure method to connect to the Pre=
Telnet is unencrypted and unsecure. Anyone watching the packets going past can get your username and password. This is "bad". Therefore, you want to immediately create a secure method to attach to the Pre. There are two alternatives:
* The dropbear package is lightweight, fully featured and simple to install. It provides an [http://en.wikipedia.org/wiki/Ssh SSH] connection to the Pre.
* The openSSH package does the same and is well understood by many linux users, but uses twice as much memory as dropbear when running.

These links take you to pages for each of those installs. At the bottom, they link back to this point.

[[dropbear-install | Dropbear Install]]
[[openssh-install | OpenSSH Install ]]

Optionally install USBnet=

USBnet allows you to create an IP network over the USB cable. This will allow you to talk to your Pre without WiFi or Bluetooh, and it keeps the battery charged.

[[usbnet-setup | USBnet Install ]]

= Disable Developer Mode (Recommended)=

Once you have verified that ssh access is enabled and working, you should turn off Developer mode.

= Where to go from here: =
* [[pre-linux-portal | Do things to enhance the linux operating system ]]
* [[app-mods-portal | Modify Existing apps]]
* [[native-apps-portal |Investigate running software in "native" mode like games and so forth]]
* [[webos-programming-portal | Write webOS software and install it. ]]
* [[pre-terminal-options | Run a terminal on your pre to access it's own linux]]
* [[research-notes-portal | read the results of others research ]]
* [[optware-cross-compilation | Optware Cross Compilation]]

''Ported by hopspitfire''

← Older revision		Revision as of 08:02, 16 August 2010
Line 1:		Line 1:
	''The new, automated setup of Optware and users can be found [[Next_steps \| here]].''		''The new, automated setup of Optware and users can be found [[Next_steps \| here]].''
		+
		+	** EVERYTHING FOLLOWING ON THIS PAGE IS OUT OF DATE. DO NOT FOLLOW IT *

	=Manual Setup of Optware, Users and Access=		=Manual Setup of Optware, Users and Access=

← Older revision		Revision as of 17:40, 20 July 2009
Line 154:		Line 154:
	* [[research-notes-portal \| read the results of others research ]]		* [[research-notes-portal \| read the results of others research ]]
	* [[optware-cross-compilation \| Optware Cross Compilation]]		* [[optware-cross-compilation \| Optware Cross Compilation]]
−
−
−	~~''Ported by hopspitfire''~~

← Older revision		Revision as of 15:45, 20 July 2009
Line 1:		Line 1:
		+	''The new, automated setup of Optware and users can be found [[Next_steps \| here]].''
		+
		+	=Manual Setup of Optware, Users and Access=
		+
	After you have gained initial root access to the Pre, you will want to install a secure access mechanism for use in the future. There are several steps you should take immediately:		After you have gained initial root access to the Pre, you will want to install a secure access mechanism for use in the future. There are several steps you should take immediately:

@@ Line 136: / Line 136: @@
 USBnet allows you to create an IP network over the USB cable. This will allow you to talk to your Pre without WiFi or Bluetooh, and it keeps the battery charged.
-[[usbnet_setup | USBnet Install ]]
+[[USBnet_Setup | USBnet Setup ]]
 = Disable Developer Mode (Recommended)=

@@ Line 3: / Line 3: @@
 =Manual Setup of Optware, Users and Access=
-After you have gained initial root access to the Pre, you will want to install a secure access mechanism for use in the future.  There are several steps you should take immediately:
+After you have gained initial access to linux on your Pre, you will want to install a secure access mechanism for use in the future.  There are several steps you should take immediately:
 * Install the Optware package manager so that you can install software onto the Pre.  The Optware package feed gives access to over 1300 prebuilt command-line packages for the Pre, and does so without causing conflicts with the built-in Palm package manager.
@@ Line 51: / Line 51: @@
 </nowiki></pre>
-Note:  If the above step is failing with a "wget: bad address" error and you are on a mac, you made a mistake by selecting USB on step 8 of the [http://predev.wikidot.com/osx-rooting OS X Rooting via USB cable] page.   To recover:  on your mac, eject the pre drive, then unplug the USB cable and plug it back in.  Don't select anyting (or select "Just Charge" if not selecting anything really bothers you).  Now repeat step 3 above.
+Note:  If the above step is failing with a "wget: bad address" error and you are on a mac, you made a mistake by selecting USB on step 8 of the [http://predev.wikidot.com/osx-rooting OS X Accessing Linux via USB cable] page.   To recover:  on your mac, eject the pre drive, then unplug the USB cable and plug it back in.  Don't select anyting (or select "Just Charge" if not selecting anything really bothers you).  Now repeat step 3 above.
 ===* 4. Manually unpack the package (do *not* use the built-in ipkg command for this):===

@@ Line 133: / Line 133: @@
 These links take you to pages for each of those installs.  At the bottom, they link back to this point.
-[[dropbear-install | Dropbear Install]]
+[[Dropbear_Install | Dropbear Install]]
- Optionally install USBnet=
+[[OpenSSH_Install | OpenSSH Install ]]
 USBnet allows you to create an IP network over the USB cable. This will allow you to talk to your Pre without WiFi or Bluetooh, and it keeps the battery charged.