公開鍵でsshログイン + password authenticationを無効化

  • set system login user ‘'’foo’’’ authentication public-keys ‘'’bar@hoge’’’ type ssh-rsa
  • set system login user ‘'’foo’’’ authentication public-keys ‘'’bar@hoge’’’ key ‘'’公開鍵(base64)の内容’’’
  • set service ssh disable-password-authentication

さくらのVPSで動かす

メモ

  • Pre shared secretの生成はVC6.5だと $ generate openvpn key

ブロードバンドルータ

  • UPnPどうしよう
    • vyatta で UPnP 接続 - Jedipunkz’s Blog
    • ubuntu機で作業 
      # apt-get install build-essential debhelper dh-autoreconf
% mkdir tmp && cd tmp
% git clone https://github.com/kiall/vyatta-upnp.git
% mv vyatta-upnp vyatta-upnp-0.2
% cd vyatta-upnp-0.2
% vi debian/changelog
0.2 → 0.2-1
% dpkg-buildpackage -us -uc -d
% cd ..
% scp vyatta-upnp_0.2-1_all.deb vyos@vyos:
  • vyosで作業(1.1.5-amd64) 
    % wget http://ftp.jp.debian.org/debian/pool/main/l/linux-igd/linux-igd_1.0+cvs20070630-3_amd64.deb
% wget http://ftp.jp.debian.org/debian/pool/main/libu/libupnp4/libupnp4_1.8.0~svn20100507-1.2_amd64.deb
# dpkg -i linux-igd_1.0+cvs20070630-3_amd64.deb libupnp4_1.8.0~svn20100507-1.2_amd64.deb vyatta-upnp_0.2-1_all.deb
  • わぁい 
    vyos@vyos# set service
Possible completions:
> conntrack-sync
             Connection tracking synchronization (conntrack-sync) service
> dhcp-relay   Dynamic Host Configuration Protocol (DHCP) relay agent
> dhcp-server  Dynamic Host Configuration Protocol (DHCP) for DHCP server
> dhcpv6-relay DHCPv6 Relay Agent parameters
> dhcpv6-server
             DHCP for IPv6 (DHCPv6) server
> dns          Domain Name Server (DNS) parameters
> https        Enable/disable the Web server
> lldp         LLDP settings
> snmp         Simple Network Management Protocol (SNMP)
> ssh          Secure SHell (SSH) protocol
> telnet       Enable/disable Network Virtual Terminal Protocol (TELNET) protocol
> upnp         Configure UPNP Internet Gateway Device (IGD)
> webproxy     Webproxy service settings
  • ギャース
    ```
    vyos@vyos# commit
    [ service upnp listen-on br0 ]
    Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 60.
    Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 61.
    Starting upnpd instance for br0 ()

[ service upnp listen-on br0 ]
Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 80.
Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 60.
Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 61.
Stopping upnpd instance for br0 ()
Starting upnpd instance for br0 ()
```

  • どうもうまいこと動いてない気がする
  • listen-on の後に outbound-interface を設定できるはず
  • vyatta-upnp/templates/service/upnp/listen-on/node.def 頭の multi: を tag: に修正
  • githubでforkされてる先のを使ったほうがいいかも

参考

参考