XPUB HUB New Nodes: Difference between revisions

From XPUB & Lens-Based wiki
(Created page with "New nodes (machines) can be edited to the HUB Tinc network. It is useful for machines (mostly Pis), without public IP addres, but which require public ssh or http access....")
 
Line 21: Line 21:
** ensuring you can login to the Pi with ssh key:
** ensuring you can login to the Pi with ssh key:
  ssh username@pi.ip.add -i ~/.ssh/id_rsa
  ssh username@pi.ip.add -i ~/.ssh/id_rsa
** the:  
then:  
** edit /etc/ssh/sshd_config:  
* edit /etc/ssh/sshd_config:  
  sudo nano /etc/ssh/sshd_config
  sudo nano /etc/ssh/sshd_config
** and uncomment the line:  
* and uncomment the line:  
  #PasswordAuthentication no
  #PasswordAuthentication no
to:  
to:  
  PasswordAuthentication no
  PasswordAuthentication no
** reload ssh: `sudo systemctl reload ssh`
* reload ssh: `sudo systemctl reload ssh`






On this side:  @Andre
'''In the XVM (xpub server)


* I will need to give invitation links to each node https://pzwiki.wdka.nl/mediadesign/HUB#Adding_a_new_thing
* I will need to give invitation links to each node https://pzwiki.wdka.nl/mediadesign/HUB#Adding_a_new_thing
* ask gnd to associate your username+pub key to the Pi IP:
* ask gnd to associate your username+pub key to the Pi IP:

Revision as of 12:50, 20 April 2020

New nodes (machines) can be edited to the HUB Tinc network.

It is useful for machines (mostly Pis), without public IP addres, but which require public ssh or http access. As is the case of some students and Xpub projects

Steps to add a machine to the Tinc network

In the Pi

  • in your Pi's create a user with same username as in the sandbox. Keeping it the same as in the sandbox - will make things easier for us and gnd
  • add your public ssh key to your username in the Pi (same as mentioned) to ~/.ssh/authorized_keys

There is a trick to do this with

 `cat ~/.ssh/id_rsa.pub | ssh local.pi.IP.addr "cat >> ~/.ssh/authorized_keys"` 
  • install Tinc on the Pis Instructions can be found here Tinc, until the creation creation of the configuration dir:
sudo mkdir -p /usr/local/etc/tinc/
  • Add your chosen Node name and IP to HUB#IP_allocation
    • Student project IPs last number should have 3 digits, last one is Simon's 10.0.1.103, so you can start from there
  • Disable ssh to your pi with password (allow ssh key only), by:
    • ensuring you laptops ssh public key is in your pi ~/.ssh/authorized_keys:
cat  ~/.ssh/authorized_keys
    • ensuring you can login to the Pi with ssh key:
ssh username@pi.ip.add -i ~/.ssh/id_rsa

then:

  • edit /etc/ssh/sshd_config:
sudo nano /etc/ssh/sshd_config
  • and uncomment the line:
#PasswordAuthentication no

to:

PasswordAuthentication no
  • reload ssh: `sudo systemctl reload ssh`


In the XVM (xpub server)