Re: [OE-core] how to *securely* do a remote install of an OE image?

2017-02-28 Thread Bryan Evenson
t; > Cc: OE Core mailing list <openembedded-core@lists.openembedded.org> > Subject: Re: [OE-core] how to *securely* do a remote install of an OE image? > > On Tue, 28 Feb 2017, Patrick Ohly wrote: > > > For ssh keys, there's rootfsdebugfiles.bbclass.

Re: [OE-core] how to *securely* do a remote install of an OE image?

2017-02-28 Thread Enrico Scholz
"Robert P. J. Day" writes: > here's a puzzler someone just presented me with ... given an > established OE build, and a way to download and install it to a > remote system, how would one set up root and/or non-root accounts > and passwords to then allow an *authorized* someone to log in to the

Re: [OE-core] how to *securely* do a remote install of an OE image?

2017-02-28 Thread Robert P. J. Day
On Tue, 28 Feb 2017, Patrick Ohly wrote: > For ssh keys, there's rootfsdebugfiles.bbclass. In local.conf: > > INHERIT += "rootfsdebugfiles" > ROOTFS_DEBUG_FILES += "/home/pohly/.ssh/id_rsa.pub > ${IMAGE_ROOTFS}/home/root/.ssh/authorized_keys ;" > > This copies my id_rsa.pub into authorized_keys

Re: [OE-core] how to *securely* do a remote install of an OE image?

2017-02-28 Thread Patrick Ohly
On Tue, 2017-02-28 at 13:32 +0100, Gary Thomas wrote: > > For ssh keys, there's rootfsdebugfiles.bbclass. In local.conf: > > > > INHERIT += "rootfsdebugfiles" > > ROOTFS_DEBUG_FILES += "/home/pohly/.ssh/id_rsa.pub > ${IMAGE_ROOTFS}/home/root/.ssh/authorized_keys ;" > > > > This copies my

Re: [OE-core] how to *securely* do a remote install of an OE image?

2017-02-28 Thread Gary Thomas
On 2017-02-28 13:27, Patrick Ohly wrote: On Tue, 2017-02-28 at 05:28 -0500, Robert P. J. Day wrote: my immediate reaction was to use SSH keys, where the newly-installed system would require SSH logins, and would have to match the corresponding private key. That would also be my preferred

Re: [OE-core] how to *securely* do a remote install of an OE image?

2017-02-28 Thread Patrick Ohly
On Tue, 2017-02-28 at 05:28 -0500, Robert P. J. Day wrote: > my immediate reaction was to use SSH keys, where the > newly-installed system would require SSH logins, and would have to > match the corresponding private key. That would also be my preferred approach. > as an alternative, perhaps

[OE-core] how to *securely* do a remote install of an OE image?

2017-02-28 Thread Robert P. J. Day
here's a puzzler someone just presented me with ... given an established OE build, and a way to download and install it to a remote system, how would one set up root and/or non-root accounts and passwords to then allow an *authorized* someone to log in to the newly-installed system and