dracut-earlyssh - A dracut module that adds ssh to the boot image (also known as earlyssh)
| Website: | https://github.com/philfry/dracut-earlyssh |
|---|---|
| License: | GPLv2+ |
| Vendor: | Unixadm.org |
- Description:
Dracut initramfs module to start dropbear sshd on early boot to enter encryption passphrase from across the internets or just connect and debug whatever stuff there. Idea is to use the thing on remote VDS servers, where full-disk encryption is still desirable (if only to avoid data leaks when disks will be decomissioned and sold by VDS vendor) but rather problematic due to lack of KVM or whatever direct console access. Authenticates users strictly by provided authorized_keys ("dropbear_acl" option) file. See dropbear(8) manpage for full list of supported restrictions there (which are fairly similar to openssh). Please read the README and configuration parameters in /etc/dracut.conf.d/earlyssh.conf before use.
Packages
| dracut-earlyssh-1.0.2-8.el8-x86_64 [27 KiB] |
Changelog
by Philippe Kueck (2019-11-21):
- prepare for rhel8 |
Package contents (click to display)
[f] /usr/share/doc/dracut-earlyssh/README.md
[f] /usr/share/doc/dracut-earlyssh/COPYING [d] /usr/share/doc/dracut-earlyssh [f] /usr/libexec/dracut-earlyssh/unlock [f] /usr/libexec/dracut-earlyssh/console_auth [d] /usr/libexec/dracut-earlyssh [f] /usr/lib/dracut/modules.d/60earlyssh/unlock-reap-success.sh [f] /usr/lib/dracut/modules.d/60earlyssh/module-setup.sh [f] /usr/lib/dracut/modules.d/60earlyssh/console_peek.sh [f] /usr/lib/dracut/modules.d/60earlyssh/50-udev-pty.rules [d] /usr/lib/dracut/modules.d/60earlyssh [f] /usr/lib/.build-id/d7/ebe59b527ea8c93a62eb876269dce4d98c2b0f [f] /usr/lib/.build-id/ca/34a5de1e2d8fa4745e5c844a68ef60942d7503 [d] /usr/lib/.build-id/d7 [d] /usr/lib/.build-id/ca [d] /usr/lib/.build-id [f] /etc/dracut.conf.d/earlyssh.conf |