Questions tagged [dropbear]
The dropbear tag has no usage guidance.
46
questions
0
votes
1
answer
41
views
How do I convert an OpenSSH-generated ED25519 key to the PEM format?
I am trying to convert an OpenSSH-generated private host key to the PEM format, so that I can use it also in dropbear-initramfs. However, when trying to do so using the ssh-keygen program, I am ...
- 592
1
vote
0
answers
29
views
LUKS passphrase over ssh is not working
I am trying to decrypt a fully encrypted system using LUKS over SSH. I followed stinky parkia's guide to unlocking device over ssh.
However, the password is not working. I am able to reach the prompt ...
- 111
0
votes
1
answer
126
views
How to advertise hostname to router (via DHCP) in initramfs with dropbear?
I've setup the Debian package dropbear-initramfs to unlock my homeservers disk over SSH. Unfortunately, the router assigns a different IP to the server on every boot and its DNS does not know the ...
- 601
0
votes
1
answer
247
views
How to enter rescue mode (RescueInitramfs) on Debian server?
I am trying to boot into RescueInitRamfs (https://wiki.debian.org/RescueInitramfs) on my Debian server after configuring DropBear as per https://benediktkr.github.io/ops/2015/05/01/remote-fde.html (...
0
votes
1
answer
518
views
DropBear SSH server does not start properly
I have configured DropBear SSH in a Linux (Ubuntu 22.04) machine. The configuration I'm using is the following:
$ cat /etc/dropbear-initramfs/config
#
# Configuration options for the dropbear-...
- 233
2
votes
1
answer
158
views
Dropbear only starts after update-initramfs
I've installed dropbear to be able to remotely decrypt my LUKS partition.
It worked flawlessly after executing update-initramfs -u, however one restart later the dropbear daemon didn't seem to start ...
- 81
0
votes
1
answer
174
views
ssh: why my disabled forward X11 for specific host don't work?
I use an alias for ssh
alias ssh
alias ssh='ssh -t -K -Y
I want to use ssh forwarding X11 except for one host
so i did this:
vim .ssh/config
host myhost
port 22
ForwardX11 no
...
- 11.9k
0
votes
1
answer
540
views
Dropbear ssh server immediately quits after startup
I built a linux kernel (v. 5.17.1) with default config and created a minimal root fs using buildroot (both for x86_64).
I modified the configuration of buildroot to use glibc and added DHCP for eth0. ...
- 121
1
vote
1
answer
1k
views
dropbear-initramfs Permission denied (publickey)
I'm having issues unlocking an encrypted disk over ssh using dropbear.
I've followed this guide to set it up, but I just end up getting Permission denied (publickey) error
I copied the public key from ...
- 177
0
votes
1
answer
137
views
"Error: Timeout reached while waiting for PID 212" while decrypting LUKS over SSH
I've been trying to open a LUKS container via SSH using dropbear and initramfs/initrd image. My setup works well. I mean, I log via SSH to the target machine, then I see the prompt saying Please ...
- 10.2k
5
votes
1
answer
2k
views
How to verify fingerprint of Dropbear RSA host key?
When I connect to my Dropbear SSH server for the first time, I get the following message:
me@laptop:~$ ssh me@server
The authenticity of host 'server' can't be established.
RSA key fingerprint is ...
- 2,798
4
votes
1
answer
936
views
encrypt private keys for dropbear ssh-access
I'd like to use dropbear as an alternative, minimal ssh-server and -client. dropbear allows the use of private-public-keys for ssh-access, although the keys are not identical to the ones used by ...
- 366
3
votes
1
answer
2k
views
Unlock LUKS device remotely - ipconfig: no devices to configure
I am trying to unlock my root encrypted Debian Buster on an acepc T11. I installed dropbear, added
DEVICE=enp1s0
IP=:::::enp1s0:dhcp
to /etc/initramfs-tools/initramfs.conf and executed update-...
- 599
0
votes
2
answers
1k
views
How to verify SSH is connected via dropbear?
An Asus RT68U is remotely accessible via SSH. Once logged in from the command line (Ubuntu 16.04), what command can be issued to verify that the shell is connected via dropbear or something else?
I ...
- 1,196
0
votes
2
answers
260
views
Dyamic tunnel troubleshooting
Goal: Configure Ubuntu and Firefox to SSH into a remote Asus router and access the remote router's configuration GUI via Firefox.
top from the remote router returns:
PID PPID USER STAT VSZ %...
- 1,196
1
vote
0
answers
414
views
SSH Proxy Session Hung Indefinitely
I have an SSH connection flow of client -> proxy server -> server which is established via Net::SSH::Proxy in ruby (this looks to be an SSH problem, not a ruby problem). Once the connection is ...
0
votes
2
answers
410
views
What exactly is my public key?
I am trying to use SimpleSSHD (Dropbear) on my Android phone, which creates an SSH Server on the phone. I can connect to the phone with Putty, but I need a single-use password which Dropbear creates. ...
- 117
0
votes
2
answers
2k
views
Not able to limit concurrent ssh sessions
Currently, I am running into an issue with dropbear. I have set the maximum number of concurrent ssh sessions to 10 but I still able to ssh an 11th sessions. Would you please let me know what I am ...
- 71
2
votes
2
answers
4k
views
How to run a script before switch_root in initramfs?
I'm starting dropbear ssh server in initramfs to be able to unlock a crypted partition over SSH*.
In Debian Jessie, it was all fine but in Buster, dropbear doesn't seem to stop after switch_root, ...
- 2,201
0
votes
1
answer
2k
views
KDE Dolphin will not connect to DropBear SSH server
I have the Android SimpleSSHD app installed on my phone. From my Arch Linux desktop I can ssh to my phone from the command line. I can also sftp to my phone from the command line.
However, KDE ...
- 17k
6
votes
3
answers
13k
views
Luks, ssh unlock, Strange behaviour, Invalid authorized_keys file
I don't know why, but I can't manage to follow these instructions on my debian stable. After installing dropbear and busybox, I tried to run initramfs -u. I got here a strange warning:
# update-...
- 3,146
0
votes
1
answer
1k
views
Fail2Ban not picking up dropbear auth failures
raspbian
Linux [hostname] 4.9.36+ #1015 Thu Jul 6 16:07:57 BST 2017 armv6l GNU/Linux
fail2ban is not picking up the dropbear auth failures. This was working for openssh without issues. I went to ...
- 13
1
vote
1
answer
815
views
SSH to older Linux box using remote port forwarding
I have an old Linux box (version 2.6.12, compiled by a colleague) behind an NAT-enabled router, that I want to access from a remote PC. There's an SSH daemon running on the box, but since there was no ...
- 121
0
votes
1
answer
2k
views
ssh: connect to host raspberry port 22: No route to host
I can't log in into ssh to crypt luks encrypted device with installed dropbear but I can while rpi is decrypted. I'm getting error: ssh: connect to host raspberry port 22: No route to host. While ...
user227030
5
votes
2
answers
4k
views
Mount a filesystem using sshfs using the Dropbear server on Yocto firmware
I built a firmware for an embedded board using Yocto. ssh server Dropbear seems to be up and running and working properly. I can login with the root user without a password. Nevertheless, I cannot ...
- 419
1
vote
1
answer
512
views
Cannot get dropbear jail to work - looks like shell immediately exits
I'm attempting to get a chroot jail working with dropbear on an embedded Linux system. I'm using this page as a guide, although I'm having to tailor it slightly for my target.
I believe everything ...
- 171
6
votes
7
answers
36k
views
dropbear ssh server won't let me connect
I'm trying to gain ssh access to my router. Currently I only have telnet access and I installed dropbear and is running (using opkg on a usb drive connected to the router).
From the beginning, what I ...
- 168
4
votes
1
answer
3k
views
initramfs, LUKS and dm_mod can't boot after upgrade
My Raspberry Pi (which is 10,000 km away from me right now) works as follows:
It is running Raspbian (July 2016's version)
The SD card contains /boot
An encrypted hard disk drive (using LUKS ...
- 165
1
vote
1
answer
1k
views
Revert initramfs to an earlier state after setting up Dropbear for early LUKS decryption
I've tried to set up Dropbear and Busybox on my virtualization host running Debian Jessie, so I could unlock the encrypted filesystems from the initramfs, before the actual boot. I've followed this ...
- 111
0
votes
0
answers
523
views
qemu arm64 image with dropbear running
I set up a ARM64 qemu image with dropbear. I'm trying to ssh in from the host. I used the following command line to start up the guest.
#!/bin/bash
~/repos/qemu-2.6.0-rc3/aarch64-softmmu/qemu-system-...
user3655
2
votes
1
answer
2k
views
Kali GNU/Linux Rolling 64-bit - Dropbear CryptSetup Wireless Setup Problem
I would like to ask for help in figuring out how to get the IP-Config program that shows up when attempting to use dropbear from guides such as this question to allow me to use wlan0 instead of eth0 ...
- 556
3
votes
2
answers
4k
views
How to use openSSH for disc encryption at boot time (OpenSSH vs. Dropbear)
Basic setup:
- Operating System: CentOS 7 (64 bit)
- Grub 2
- separate boot partition with ext4
- luks encryption (aes-xts-plain64:sha512) on two disc partitions which both need to be unlocked by ...
1
vote
2
answers
838
views
How to generate SSHFP records with OpenWrt/Dropbear?
How to generate SSHFP records for a Dropbear instance at OpenWrt? I have dropbearconvert and openssh-keygen installed, but nothing works. Always invalid format or similar errors. There are two host ...
- 13
2
votes
2
answers
2k
views
Get rid of abandoned SSH processes
I have a Linux machine running dropbear as its SSH server. I open many SSH sessions
from a client towards that machine, meanwhile the sessions are active I pull out the Ethernet cable from the server ...
- 12.6k
5
votes
1
answer
957
views
Dropbear immediately drops connection on DD-WRT
I have a home wireless router running DD-WRT. I am unable to SSH into the router (Dropbear) even after restoring default settings and reinstalling the DD-WRT firmware. So I tried to SSH into the ...
- 181
4
votes
1
answer
816
views
Dropbear terminates before LUKS password prompt on Debian Jessie
I'm trying to use dropbear as a ssh server to unlock an encrypted partition which was created during Debian 8.2 setup. It boots to the password prompt (and unlocks if correct password is typed) but ...
- 41
1
vote
1
answer
485
views
Reverse SSH dynamic port allotment error
When I run:
ssh -i mycert -R 0:localhost:80 user@myserver.com
and run the following on 'myserver.com':
curl localhost:dynamicly_assigned_port
I get 'ssh:Server send unrequested port, from port ...
- 125
4
votes
1
answer
3k
views
How to specify ConnectTimeout for dropbear?
I'm trying to use the Dropbear SSH and in the previous version of SSH I used, you could add the argument -o ConnectTimeout=10 to cause an attempted connection to timeout if unsuccessful after ten ...
- 183
2
votes
0
answers
3k
views
dbclient - login without manually typing password
On my router which runs OpenWRT I need a script which will keep a SSH connection alive mostly all the time (small breaks are OK). As the SSH server which I want to connect to takes care of multiple ...
- 502
2
votes
1
answer
4k
views
How to connect to ssh-server running on embedded linux without /etc/passwd?
After installing ssh server on my remote machine (which runs embedded Linux), I tried to connect to ssh server from host machine but it failed.
This is because I could not specify user account when ...
- 325
2
votes
1
answer
1k
views
How to check my account on embedded linux without "/etc/passwd"?
On some embedded linux systems, there is no /etc/passwd file and /etc directory is not writable (which means I cannot set user account and password?).
Then what is my (default) account name and ...
- 325
1
vote
1
answer
1k
views
Compiling OpenSSH client or Dropbear for Android
I have an interesting problem.
I'd like to use a private SSH key with my Android Terminal Emulator (jackpal.androidterm). I'd like to install the private key in a fairly-secure location and be able ...
- 38.2k
7
votes
1
answer
14k
views
Are dropbear and OpenSSH host keys compatible?
The title basically says it all. But mind: host key, not the login key.
And if they're not compatible out of the box, is there a way to convert between them - and what would be the steps in that case?...
- 16k
1
vote
2
answers
2k
views
Does dropbear take care of hosts.allow and hosts.deny?
I'm running dropbear as SSH daemon on Debian (actually Raspbian). I tried setting
# /etc/hosts.allow
dropbear:192.168.1.1
# my static ip from which I SSH connect to the device
and
# /etc/hosts.deny
...
- 3,432
9
votes
2
answers
8k
views
Disable SSH password authentication on specific interface
I have an OpenWrt router, I want to disable password authentication on SSH, so that one can only authenticate with keys. This is easily achieved by following the guide in the documentation, however, I ...
- 93
3
votes
0
answers
836
views
How to monitor users who use dropbear ssh tunneling?
With OpenSSH in my Debian server, I can see who is using ssh tunneling using either nethogs or top command. When I change from openssh to dropbear I can't monitor user again. In nethogs or top command ...
- 394