Jigish Gohil kirjoitti 2014-08-27 19:53:

> Adding ssh keys of all servers specified in /etc/sysconfig/kiwi-ltsp
> is done automatically on openSUSE, but you can easily run ssh-keyscan
> ip >> /your/chroot/path/etc/ssh/ssh_known_hosts for all servers,
> before building image.

I think I got it, but just because I cheated...

http://ltsp.fi/howto/Debian/i386_64MB.webm

http://irclogs.ltsp.org/?d=2010-02-02

<Gadi> OR you can cheat at the cost of reduced security and edit the 
chroot's /etc/ssh/ssh_config setting StrictHostKeyChecking no which will 
open you up to the potential of man-in-the-middle attacks

This is Debian LTSP-PNP, so there is no chroot, just 
/opt/ltsp/images/i386.img. There is no ssh_known_hosts either.

I still have to figure out where to put those host keys and how.

root@debian-ltsp-pnp:~# ls /etc/ssh
moduli      sshd_config       ssh_host_dsa_key.pub  
ssh_host_ecdsa_key.pub  ssh_host_rsa_key.pub
ssh_config  ssh_host_dsa_key  ssh_host_ecdsa_key    ssh_host_rsa_key

------

I just cloned Debian LTSP-PNP (and changed what was needed) and disable 
dnsmasq for other two servers.

192.168.0.105 - debian-ltsp-pnp
192.168.0.106 - debian-ltsp-pnp-02
192.168.0.107 - debian-ltsp-pnp-03

root@debian-ltsp-pnp:~# cat /var/lib/tftpboot/ltsp/i386/lts.conf
[Default]
LDM_DIRECTX=True
RM_SYSTEM_SERVICES="dnsmasq nbd-server nfs-kernel-server ssh whoopsie"
RM_THIN_SYSTEM_SERVICES="binfmt-support openbsd-inetd qemu-kvm 
virtualbox winbind"
USE_LOCAL_SWAP=True
MY_SERVER_LIST="192.168.0.106 192.168.0.107"

------

Aug 27 23:29:09 debian-ltsp-pnp dnsmasq-tftp[2398]: sent 
/var/lib/tftpboot/ltsp/i386/pxelinux.0 to 192.168.0.13
Aug 27 23:29:09 debian-ltsp-pnp dnsmasq-tftp[2398]: sent 
/var/lib/tftpboot/ltsp/i386/vmlinuz-3.2.0-4-486 to 192.168.0.13
Aug 27 23:29:16 debian-ltsp-pnp dnsmasq-tftp[2398]: sent 
/var/lib/tftpboot/ltsp/i386/lts.conf to 192.168.0.13

Aug 27 23:29:23 debian-ltsp-pnp-02 ldminfod[4060]: connect from 
192.168.0.13 (192.168.0.13)
Aug 27 23:29:23 debian-ltsp-pnp-02 ldminfod[4069]: connect from 
192.168.0.13 (192.168.0.13)

Aug 27 23:29:46 debian-ltsp-pnp-02 sshd[4078]: Accepted password for 
ltsp001 from 192.168.0.13 port 55774 ssh2
Aug 27 23:29:46 debian-ltsp-pnp-02 sshd[4078]: pam_unix(sshd:session): 
session opened for user ltsp001 by (uid=0)

root@debian-ltsp-pnp-02:~# ps ax | grep ltsp
  2320 ?        S      0:00 avahi-daemon: running 
[debian-ltsp-pnp-02.local]
  3614 ?        Ss     0:00 sshd: ltsp001 [priv]
  3619 ?        S      0:00 sshd: ltsp001@pts/3
  3633 ?        Ss     0:00 bash -c  LTSP_CLIENT=192.168.0.13 
LTSP_CLIENT_HOSTNAME=ltsp13 LTSP_CLIENT_MAC=08:00:27:CC:7A:AB 
LIBGL_ALWAYS_INDIRECT=true LC_ALL=fi_FI.UTF-8 LANGUAGE=fi_FI.UTF-8 
LANG=fi_FI.UTF-8 DISPLAY=192.168.0.13:7  
PULSE_SERVER=tcp:192.168.0.13:4713 ESPEAKER=192.168.0.13:16001 
LTSP_ALSA_DEFAULT=pulse /etc/X11/Xsession  < /dev/null > /dev/null ; 
/usr/sbin/ltspfsmounter all cleanup
  3696 ?        S      0:00 openbox --config-file 
/home/ltsp001/.config/openbox/lxde-rc.xml
  4078 ?        Ss     0:00 sshd: ltsp001 [priv]
  4083 ?        S      0:00 sshd: ltsp001@pts/7
  4097 ?        Ss     0:00 bash -c  LTSP_CLIENT=192.168.0.13 
LTSP_CLIENT_HOSTNAME=ltsp13 LTSP_CLIENT_MAC=08:00:27:CC:7A:AB 
LIBGL_ALWAYS_INDIRECT=true LC_ALL=fi_FI.UTF-8 LANGUAGE=fi_FI.UTF-8 
LANG=fi_FI.UTF-8 DISPLAY=192.168.0.13:7  
PULSE_SERVER=tcp:192.168.0.13:4713 ESPEAKER=192.168.0.13:16001 
LTSP_ALSA_DEFAULT=pulse /etc/X11/Xsession  < /dev/null > /dev/null ; 
/usr/sbin/ltspfsmounter all cleanup
  4160 ?        S      0:00 openbox --config-file 
/home/ltsp001/.config/openbox/lxde-rc.xml

Aug 27 23:31:06 debian-ltsp-pnp dnsmasq-tftp[2398]: sent 
/var/lib/tftpboot/ltsp/i386/pxelinux.0 to 192.168.0.26
Aug 27 23:31:07 debian-ltsp-pnp dnsmasq-tftp[2398]: sent 
/var/lib/tftpboot/ltsp/i386/vmlinuz-3.2.0-4-486 to 192.168.0.26
Aug 27 23:31:14 debian-ltsp-pnp dnsmasq-tftp[2398]: sent 
/var/lib/tftpboot/ltsp/i386/lts.conf to 192.168.0.26

Aug 27 23:31:22 debian-ltsp-pnp-03 ldminfod[4015]: connect from 
192.168.0.26 (192.168.0.26)
Aug 27 23:31:22 debian-ltsp-pnp-03 ldminfod[4024]: connect from 
192.168.0.26 (192.168.0.26)

Aug 27 23:31:45 debian-ltsp-pnp-03 sshd[4033]: Accepted password for 
ltsp002 from 192.168.0.26 port 49647 ssh2
Aug 27 23:31:45 debian-ltsp-pnp-03 sshd[4033]: pam_unix(sshd:session): 
session opened for user ltsp002 by (uid=0)

root@debian-ltsp-pnp-03:~# ps ax | grep ltsp
  2345 ?        S      0:00 avahi-daemon: running 
[debian-ltsp-pnp-03.local]
  3666 ?        Ss     0:00 sshd: ltsp002 [priv]
  3671 ?        S      0:00 sshd: ltsp002@pts/3
  3685 ?        Ss     0:00 bash -c  LTSP_CLIENT=192.168.0.26 
LTSP_CLIENT_HOSTNAME=ltsp26 LTSP_CLIENT_MAC=08:00:27:D5:2E:14 
LIBGL_ALWAYS_INDIRECT=true LC_ALL=fi_FI.UTF-8 LANGUAGE=fi_FI.UTF-8 
LANG=fi_FI.UTF-8 DISPLAY=192.168.0.26:7  
PULSE_SERVER=tcp:192.168.0.26:4713 ESPEAKER=192.168.0.26:16001 
LTSP_ALSA_DEFAULT=pulse /etc/X11/Xsession  < /dev/null > /dev/null ; 
/usr/sbin/ltspfsmounter all cleanup
  3748 ?        S      0:00 openbox --config-file 
/home/ltsp002/.config/openbox/lxde-rc.xml
  4033 ?        Ss     0:00 sshd: ltsp002 [priv]
  4038 ?        S      0:00 sshd: ltsp002@pts/6
  4052 ?        Ss     0:00 bash -c  LTSP_CLIENT=192.168.0.26 
LTSP_CLIENT_HOSTNAME=ltsp26 LTSP_CLIENT_MAC=08:00:27:D5:2E:14 
LIBGL_ALWAYS_INDIRECT=true LC_ALL=fi_FI.UTF-8 LANGUAGE=fi_FI.UTF-8 
LANG=fi_FI.UTF-8 DISPLAY=192.168.0.26:7  
PULSE_SERVER=tcp:192.168.0.26:4713 ESPEAKER=192.168.0.26:16001 
LTSP_ALSA_DEFAULT=pulse /etc/X11/Xsession  < /dev/null > /dev/null ; 
/usr/sbin/ltspfsmounter all cleanup
  4115 ?        S      0:00 openbox --config-file 
/home/ltsp002/.config/openbox/lxde-rc.xml

------

Best Regards Asmo Koskinen.

------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to