Dropbear works well for preboot LUKS unlocking with remote servers.
(Shameless plug:) For automatic unlocking at unattended reboots of LUKS-locked remote servers, see Mandos: https://www.recompile.se/mandos
Yes, this is devilish clever stuff :)
Dropbear SSH, a lightweight alternative to OpenSSH
91–100 of 110 posts
Re: Dropbear SSH, a lightweight alternative to OpenSSH
#92I only miss one option in the Dropbead, the UseDNS No equivalent from OpenSSH.
That should be the default in Dropbear (as a compile-time option)?
#define DO_HOST_LOOKUP 0Re: Dropbear SSH, a lightweight alternative to OpenSSH
#93If anyone is interested in other lightweight tools to complement a minimal embedded linux distro, check out Troglobit's GitHub repo: https://github.com/troglobit. He has a collection of tiny apps perfect for embedded systems, such as...
- mdnsd (not in Busybox),
- merecat httpd (much more full-featured than busybox httpd)
- inadyn dynamic DNS updater
- finit (IMO much nicer than busybox's runsv)
- watchdogd
- uftpd
- ntpd (with ipv6 support!)
Re: Dropbear SSH, a lightweight alternative to OpenSSH
#94Earlier quoted context omitted.
Lol
Let’s keep in mind the user story: “Being able to wirelessly perform an incremental backup of all your photos and data is life-changing” The LOL is telling your Mom about DropbearSSH when this is now how iCloud Photos and Files just works. The equivalent goal is baked in. You can still use cables or local WiFi via iTunes, but now all media and files sync over-the-air as files, along with an incremental backup of all…
Everything in iCloud, including your encrypted messages, are easily accessible to Apple[0] and will be released without a fight, despite Apple's vaunted privacy stance. (Perhaps that social contract has some fine print if the CEO of your company looks at your files and decides you're guilty without wasting time with 'a jury of your peers' and all that nonsense.)
Android (with Google) offers the same functionality (AFAIK) as iCloud, but sometimes you just prefer that your private photos remain just that.
0. https://news.vice.com/en_us/article/xwm4ya/paul-manafort-may...
Re: Dropbear SSH, a lightweight alternative to OpenSSH
#95I use an ad-free, open-source Android app called SimpleSSHD that implements a Dropbear SSH server. Being able to SSH into your phone and wirelessly perform an incremental rsync backup of all your photos and data is life-changing compared to the hell that is cables and the MTP protocol. Thank you to all these projects for delivering me from the clutches of MTP, I am indebted.
Syncthing does an admirable job here as well (also available on F-droid).
Re: Dropbear SSH, a lightweight alternative to OpenSSH
#96I use an ad-free, open-source Android app called SimpleSSHD that implements a Dropbear SSH server. Being able to SSH into your phone and wirelessly perform an incremental rsync backup of all your photos and data is life-changing compared to the hell that is cables and the MTP protocol. Thank you to all these projects for delivering me from the clutches of MTP, I am indebted.
A long time ago, when I tried something like that, I was stymied because the SSH server did not have permissions to write to any directory which the document readers etc. could see. Is this sort of thing still a problem? How did you get around it?
This is an Android problem that is sold as a feature by Google... still a problem on my version of Android (in Android 5.0 and later, an app can request the permission for reading/writing to a folder on the SD card though: https://metactrl.com/docs/sdcard-on-lollipop/ )
Re: Dropbear SSH, a lightweight alternative to OpenSSH
#97Earlier quoted context omitted.
If your phone is rooted, you can use e.g. Linux Deploy to install a full Linux distribution. Then, you can set up regular ol' OpenSSH, mount /sys and /data under the Linux chroot, and rsync as usual. I use this method to rsync to btrfs snapshots (+ raw copies of non-filesystem partitions) to make daily incremental backups of the entire phone. (Restoring said backups is a bit more involved, but I verified it's doable.…
I'd backup to a more reliable filesystem than btrfs. In my experience you will eventually randomly lose data with btrfs. I have lost all trust in it.
"raid" 1/0 and 10 are stable, others are not. Theoretically btrfs can protect against bit-rot where other fs's typically don't.
Re: Dropbear SSH, a lightweight alternative to OpenSSH
#98Earlier quoted context omitted.
I think that you need to run the command "termux-setup-storage" to be able to r/w again: https://wiki.termux.com/wiki/Termux-setup-storage
Thanks, doesn't work though. I have write access to the private directory for termux on the sdcard but nothing else (which unfortunately breaks my usage, I'll report it to them any day to see if a fix is possible).
This is the way Termux works so far, External storage: Storage on external SD cards. Each app has a private folder on the external SD card, and interchange between them needs to use a special API not yet available in Termux.
Re: Dropbear SSH, a lightweight alternative to OpenSSH
#99Earlier quoted context omitted.
I'd backup to a more reliable filesystem than btrfs. In my experience you will eventually randomly lose data with btrfs. I have lost all trust in it.
"raid" 1/0 and 10 are stable, others are not. Theoretically btrfs can protect against bit-rot where other fs's typically don't.
Theoretically that might be the goal. In my experience data melts away like butter on btrfs.
Re: Dropbear SSH, a lightweight alternative to OpenSSH
#100Earlier quoted context omitted.
Thanks, doesn't work though. I have write access to the private directory for termux on the sdcard but nothing else (which unfortunately breaks my usage, I'll report it to them any day to see if a fix is possible).
This is the way Termux works so far, External storage: Storage on external SD cards. Each app has a private folder on the external SD card, and interchange between them needs to use a special API not yet available in Termux. https://wiki.termux.com/wiki/Internal_and_external_storage
It worked fine in Android 7, when I updated to 8 my scripts started getting permission-denied errors on writes.
I don't see anything in that link that says that sdcard (outside private folder) is read-only.
The way I read "Each app has a private folder on the external SD card, and interchange between them needs to use a special API not yet available in Termux." is that I can't read another applications private folder, but I'm not trying to - I just want (write+delete) access to the publicly accessible parts of the sdcard (lots of other applications do this, and termux did in Android 7).