From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: Re: guixsd install questions Date: Fri, 27 Jan 2017 20:24:42 +0100 Message-ID: <87r33o1f2d.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> References: <87tw8kkisf.fsf@santanas.co.za> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:54017) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cXC8e-0002XR-Dp for help-guix@gnu.org; Fri, 27 Jan 2017 14:24:49 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cXC8b-0003Aj-6n for help-guix@gnu.org; Fri, 27 Jan 2017 14:24:48 -0500 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:47228) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cXC8b-0003AX-05 for help-guix@gnu.org; Fri, 27 Jan 2017 14:24:45 -0500 In-Reply-To: <87tw8kkisf.fsf@santanas.co.za> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Divan Santana , help-guix --=-=-= Content-Type: text/plain Divan Santana writes: > Hi All, > > Few newbie questions regarding install. > > * How to get sshd running on install image for easier remote install. > > Useful for a VM: > > I'm doing this nasty hack for now. > > Get ssh working on boot image: > #+BEGIN_EXAMPLE > guix package -i shadow openssh > export PATH="/root/.guix-profile/bin:/root/.guix-profile/sbin${PATH:+}$PATH" > zile /etc/passwd # add sshd account > zile /etc/shadow # add sshd account > mkdir /etc/ssh > echo "PermitRootLogin yes" > /etc/ssh/sshd_config > ssh-keygen -t ecdsa -N "" -f /etc/ssh/ssh_host_ecdsa_key > `which sshd` > passwd root > #+END_EXAMPLE > > Sure there's a better way then the above hack? Hi Divan, That is a nasty hack indeed. Yet it's about the best approach right now. I think it could be useful to ship a SSH server in the install image. You can generate a disk image containing a service for "lsh" by adding something like this to the file "gnu/system/install.scm", under "%installation-services". (lsh-service #:port-number 22 #:root-login? #t #:password-authentication? #f ;; The root account is passwordless, so ;; make sure a password is required. #:allow-empty-passwords? #f) Then generate a new disk image with `guix system disk-image --image-size=1G gnu/system/install.scm`. Can you try that? If it works, feel free to submit it as a patch to the "guix-devel" mailing list and we can consider adding it to the next release. Thanks for the report! Unfortunately I don't know the answer to the other questions. > Greetings from South Africa :) Welcomings from Norway! :) --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAliLnnoACgkQoqBt8qM6 VPpI4gf7BojAX7WkV4yLZ+XWSBrREKryyHbNuevM2x9imjvanSloy6wPFbE21z5b CHOJ/uHR0iitKTOZuaq8xrBZ6hsCTFy0EEkQyoVYbN75pnzr51GBK94v9tZ+YaUK FsNcynU1+4e4T280zQ8AV4DXaaJ5tsxGk8sz3OSolvDEucXRaEFQ7Livx4QmA+Ta N+c7pFaaSDu41GSzuczg4DqWbzsn3ywKdxzvSWTxkUTmlmj1e8561ZNFL9Lm6PbF d2pGMTFjlEJXuXZYdSumnB56L2x3ila3DmgBSa33Jnf3/MXkQFp516dQI9HElId8 rvZ81JiExsyQJ+VOm0/Ft8kHBZnBiA== =/Zxz -----END PGP SIGNATURE----- --=-=-=--