Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 Mar 2020 16:07:54 +0100
From:      Ben RUBSON <ben.rubson@gmx.com>
To:        freebsd-hackers@freebsd.org
Subject:   Re: Allow to run SSHd in Installer (12.2 patch)
Message-ID:  <6DB159F2-99C2-46BE-AEC5-99FB7582FCF0@gmx.com>
In-Reply-To: <2352A2A0-999C-453F-92A1-D067E4C05712@gmx.com>
References:  <2352A2A0-999C-453F-92A1-D067E4C05712@gmx.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> On 2 Mar 2020, at 13:09, Ben RUBSON <ben.rubson@gmx.com> wrote:
>=20
> Hi,
>=20
> I've done some work to allow to connect to FreeBSD installer through =
SSH.
> It can be useful for example if we have specific tasks to perform =
before installation, such as disks configuration etc...
> Working through a SSH connection is much more convenient than in front =
of a console.
> FreeBSD installer can then also be used as a rescue disk.
>=20
> To achieve this, I've modified FreeBSD installer, so that after having =
installed SSHd, if performs following configuration modifications :
> - generate host keys into /var/ssh (as default /etc/ssh is not =
writable) ;
> - only allow keys authentication ;
> - allow root authentication ;
> - read authorized_keys file from /var/ssh (as default homedirs are not =
writable).
>=20
> SSHd can then be started thanks to the installer shell : service sshd =
start
> And a public key put into for example =
/var/ssh-keys/root/authorized_keys, thanks to fetch or whatever.
>=20
> Work is here :
> https://github.com/freebsd/freebsd/pull/156
> Rather simple, and ready to be merged.
>=20
> This job is more than 2 years old, I would then really be glad if we =
could see this in 12.2 installation ISOs.
> It would prevent me from having to modify the new ISO files to =
implement this patch.

Any thoughts ? :)

Thank you very much !

Ben




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6DB159F2-99C2-46BE-AEC5-99FB7582FCF0>