Other HUB nodes: Difference between revisions

From XPUB & Lens-Based wiki
Line 21: Line 21:




In your Pi: (or other Unix machine connected to the internet) create a user <code>adduser<code> with same username as used in the [[XPUB Sandbox|Sandbox Pi]]  
In your Pi: (or other Unix machine connected to the internet) create a user <code>adduser</code> with same username as used in the [[XPUB Sandbox|Sandbox Pi]]  
* Keeping it the same as in the sandbox - will make things easier for us and gnd (no need to give him again your public ssh key)  
* Keeping it the same as in the sandbox - will make things easier for us and gnd (no need to give him again your public ssh key)  


Line 28: Line 28:
In your Pi: Install [[Tinc]] on the Pi. The instructions can be found in the [[Tinc]] page
In your Pi: Install [[Tinc]] on the Pi. The instructions can be found in the [[Tinc]] page


Add your chosen Node name and IP to [[HUB]]
Add your chosen Node name and IP to [[HUB#IP_allocation]]
* Student project IPs last number should have 3 digits
* Student project IPs last number should have 3 digits


In your Pi: Disable ssh with password (allow ssh with sshkey only)
In your Pi: Disable ssh with password (allow ssh with sshkey only)
ensure:
ensure:
* you laptops ssh public key is in your Pi ~/.ssh/authorized_keys: <code>cat  ~/.ssh/authorized_keys<code>
* you laptops ssh public key is in your Pi ~/.ssh/authorized_keys: <code>cat  ~/.ssh/authorized_keys</code>
* edit /etc/ssh/sshd_config: <code>sudo nano /etc/ssh/sshd_config</code  
* edit /etc/ssh/sshd_config: <code>sudo nano /etc/ssh/sshd_config</code  
* uncomment the line: <code>#PasswordAuthentication no</code>
* uncomment the line: <code>#PasswordAuthentication no</code>

Revision as of 13:26, 14 May 2020


Adding new Node to HUB

For graduation projects or some Special issues, the XPUB HUB Node: Sandbox might not be adequate, add new nodes can be added the XPUB HUB Tinc network This page describes how to do it

Steps to add a new Node to HUB

For Pi user (with sudo/root)

Use this template to fill in all the fields and you go through the process

    user: psc
    Node name: ?XYZ?
    IP: 10.0.0.???
    url: https://hub.xpub.nl/?XYZ?
    ssh public key:
    ?????????@??


In your Pi: (or other Unix machine connected to the internet) create a user adduser with same username as used in the Sandbox Pi

  • Keeping it the same as in the sandbox - will make things easier for us and gnd (no need to give him again your public ssh key)

In your Pi: Add your laptop's user's public ssh key to your Pi user account in ~/.ssh/authorized_keys

In your Pi: Install Tinc on the Pi. The instructions can be found in the Tinc page

Add your chosen Node name and IP to HUB#IP_allocation

  • Student project IPs last number should have 3 digits

In your Pi: Disable ssh with password (allow ssh with sshkey only) ensure:

  • you laptops ssh public key is in your Pi ~/.ssh/authorized_keys: cat ~/.ssh/authorized_keys
  • edit /etc/ssh/sshd_config: sudo nano /etc/ssh/sshd_config</code
  • uncomment the line: #PasswordAuthentication no
  • to: PasswordAuthentication no
  • reload ssh: sudo systemctl reload ssh

For XPUB Staff (with sudo in XVM)

Create a Tinc invitation links to each node HUB#Adding_a_new_thing

Ask gnd to associate the Pi user's username + ssh pubkey with the Pi IP