I am updating from the 2017 version to the latest 2021 version. The shell script enablessh.sh does not seem to exist. creating /boot/ssh using sudo touch /boot/ssh does seem to work. I now have ssh access to the emonpi. I can control it remotely rather than having to connect it to a keyboard and …

Hello Nigel, I’ve moved this to a new thread as the original was quite old. The reason for disabling SSH access by default is that we ship the SD card with a default SSH password, it has been ‘emonpi2016’ for years. Disabling access reduces the chance that this would be used maliciously. The emonPi…

[image] TrystanLea: it is a real hassle having to put the SD card in an SD card reader to add that /boot/ssh file But then, if you’ve just written the SD card with dd, balenaEtcher or whatever, it’s very easy. I think the only solution is to request the user to set and write down the new SSH…

Thanks Robert, your right that requiring the password to be set at first boot is probably the best option, would that then leave SSH enabled or would you still have the option to turn SSH on/off via the interface?

I’m not entirely sure what you’re getting at. Once you’ve got a good password or better, a pair of key files, SSH can be left enabled. Disabling SSH physically adds some security - depending on how good the password is. But you must not enable SSH without. This is essentially a 3-state setup: SSH…

I am trying to find the apache (and other) access log files to see if there are any hackers trying to infiltrate my system. The logs are not in /var/log/apache2. In the absence of hacking evidence I would prefer a simpler approach leaving things open and minimising the requirement for different logi…

emonpi - a raspberry Pi, with an add-on board that accepts two CT inputs and is housed in an aluminium case with an LCD screen and a pushbutton. emonPi Energy Monitor - Shop | OpenEnergyMonitor emonbase - a raspberry Pi with an add-on radio module that cannot do Power measurements. emonBase - web-c…

[image] Robert.Wall: But then, if you’ve just written the SD card with dd, balenaEtcher or whatever, it’s very easy. I’d agree with that. Take card out of PC, put card back in (to remount boot), create blank file. I think this should not be enabled by default. RPi OS even forces a user and …

[image] borpin: could this be enabled from EmonCMS interface? How about a second password entry option at the point that you register the admin emoncms user? With a note about what an SSH password is?

[image] nigeldodd: the simplicity of updating Chromebooks and Teslas and which have a simple, single login. That’s the upside. The downside is you’re totally dependent on that ecosystem that’s there primarily to make money for its provider. As we’ve see a few times, when that provider pulls t…

A commercial system will endeavour to do that. Include Apple in the list of easy to use technology. I’m not sure “simplicity of use” and “commercial systems” (with the danger of plug pulling) are inextricably linked though. I realise there is a lot under the hood of an emon system with the hardware…

Community

OpenEnergyMonitor

Home
Docs
Community
Shop
Search

OpenEnergyMonitor Community

Enabling SSH by default

emonSD

show post in topic

Home
Categories
Guidelines
Terms of Service

Powered by Discourse, best viewed with JavaScript enabled