grazzolini / mkinitcpio-tinyssh Goto Github PK

Do you think it is possible to use tinyssh in this setup with another user apart from root? If yes, can you point me to where this config change needs to be made?

Thank you!

I was looking for the same script in debian and could not find it anywhere. I used your logic using initramfs-tools in debian.

Sharing it here for future users in the same situation.

https://git.sp4ke.com/sp4ke/tinyssh-initramfs

Hi again mate,

I've been setting this up on all of my boxes, and had no issues until I set it up under Arch Linux ARM (Raspberry Pi 2, Model B - armv7h).

I've just debugged it for a while now, and when run from an initrd on Arch ARM it looks for authorized_keys in //.ssh

Not sure if this bug is yours to deal with, a tinyssh bug, or something the Arch ARM guys aren't setting properly in early userspace.

Basically, /root/.ssh is not looked at, I believe, because the root home dir is set to / and /.ssh is the expected directory. /root/.ssh is correctly added to the initrd but is not used.

Hope this makes sense.

Cheers.

Right now the port seems to be hardcoded to default 22.

It would be nice if this was configurable. What do you think?

At https://github.com/grazzolini/mkinitcpio-tinyssh/blob/master/tinyssh_install#L61, the install script will fail if /etc/tinyssh/root_key is missing. However, later in the script:

cat /etc/tinyssh/root_key > "${BUILDROOT}"/root/.ssh/authorized_keys

Would it make sense to also just check if /root/.ssh/authorized_keys already exists and then skip that copy step?

The CLI for tinyssh-convert was (recently?) changed. Currently, trying to use this package causes:

  -> Running build hook: [tinyssh]
tinyssh-convert: usage: tinyssh-convert out-tinysshkeydir < in-opensshfile